E-Commerce

Online sales may not come from one checkout page. Orders arrive from the website, from marketplace listings and from phone staff. Some customers pay once, others on a subscription or payment plan, and some payments are authorized at order time and captured when the item ships. Every one of those paths has to end up in the same order and accounting records.

IKRC builds and integrates the order side of commerce: payment gateway integration, recurring billing, authorization and capture, refunds, marketplace and product feeds, and the reconciliation reports that match gateway settlements to orders.

Card data and PCI DSS

IKRC's payment designs aim to keep card numbers off your servers, using the payment processor's hosted payment page or hosted fields. Outsourcing card handling this way can reduce which PCI DSS requirements apply to you. It does not remove your responsibility as the merchant: the PCI Security Standards Council states that PCI DSS still applies, and the merchant must confirm the provider's compliance, keep written agreements and validate its own status. The assessment and validation stay between you, your acquirer and, where required, your assessor.