Draw the path from checkout to the processor
Identify who hosts the payment form, which system receives payment fields, and where the provider returns the result. Include error monitoring, support tickets, browser session recording, and any order exports in the inventory. Confirm the scope with your processor or compliance-accepting entity.
Use limited references for support and reconciliation
Give staff the order number, gateway reference, and provider-approved masked details needed to look up a transaction. Keep full card details out of ordinary messages and logs. PCI SSC prohibits retaining card verification codes after authorization, even when a customer asks you to save them.
Recheck the data path after a change
- Review payment extensions, embedded forms, analytics tools, and script additions that can affect checkout.
- Check a staging order to see what the application logs and support screens actually capture.
- Confirm with your acquirer which validation requirements apply after changing your checkout design.
Sources and further reading
Ready to share your business details?
Start an application or contact Lunar Payments about your setup.
Start application Contact us