Skip to main content

Integration & Exit

On this page
Prerequisites

Before planning integration:

Your exit strategy is part of the purchase decision. How you integrate affects PCI scope, conversion, flexibility, and whether you can leave.

Choosing Integration Method​

How you connect to your processor affects PCI scope, conversion, and flexibility.

API vs. Hosted Checkout vs. Plugin​

MethodPCI ScopeControlSpeed to MarketBest For
Hosted checkoutLowestLimitedFastMost SMBs
PluginLowLimitedFastPlatform users (Shopify, WooCommerce)
APIHigherFullSlowCustom flows, omnichannel

You Probably Don't Need an API​

If you're asking "should I use the API?", the answer is probably no.

Use hosted checkout if:

  • You're under $1M/mo
  • Standard checkout flow works for you
  • You don't have dedicated dev resources
  • PCI compliance scares you (it should)

Use API if:

  • You need custom checkout flows
  • You're building omnichannel (online + in-person unified)
  • You're a marketplace or platform
  • You have dev resources to maintain it

Integration Method Decision Tree​

Do you need custom checkout UI?
  ├── No → Use hosted checkout or plugin
  └── Yes → Do you have dedicated dev resources?
              ├── No → Reconsider. Hosted checkout is fine.
              └── Yes → Are you prepared for SAQ D (PCI)?
                          ├── No → Use tokenization (SAQ A-EP)
                          └── Yes → Full API integration

Ask Your Dev​

"What's our PCI scope with our current integration? What would change if we switched methods?"

Token Portability: The Golden Handcuffs​

Your exit strategy is part of the purchase decision.

Why This Matters​

If you have stored cards (subscriptions, repeat customers), those cards are tokenized by your processor. If you leave, you need those tokens. If your processor won't export them, your customers have to re-enter cards. That means churn.

Operator Questions to Ask Before Signing​

  1. "If I leave, do you export my tokens to a new PCI-compliant vault?"
  2. "What is the process, cost, and timeline?"
  3. "Is this supported for network tokens and processor tokens?"

Network Tokens vs. Processor Tokens​

  • Processor tokens: Tied to that processor. Portability depends on their policy.
  • Network tokens: Visa/Mastercard tokens. More portable, but still need processor cooperation.

Contract Language to Look For​

  • "Token export" or "data portability" clauses
  • Fee structure for token export (some charge per-token)
  • Timeline for export (30 days? 90 days?)

If it's not in the contract, assume you can't do it.

Token Portability Comparison​

Processor TypeTypical PortabilityNotes
StripeSupported (to PCI-compliant vault)Well-documented process
SquareLimitedMay require customer re-entry
PayPal/BraintreeSupportedStandard migration tools
Traditional ISOsVaries widelyGet in writing
Legacy processorsOften not supportedMajor migration risk

Related: Subscriptions and Recurring

Card-Present Considerations​

If you have in-person sales, processor selection gets more complex.

Terminal Bundling vs. Separate Purchase​

  • Bundled terminals: Often "free" but locked to processor. Leave, and the terminal is a paperweight.
  • Separate purchase: More upfront cost, but you own the hardware.

Ask: "If I switch processors, can I use my terminals with the new processor?"

In-Person Transaction Pricing Differences​

  • CP (card-present) transactions typically have lower interchange than CNP
  • Some processors quote blended rates that hide the CP advantage
  • Ask for separate CP and CNP rate breakdowns

Omnichannel Processor Requirements​

If you sell online and in-person, you want one processor for both. Why:

  • Unified reporting
  • Single reconciliation
  • Token sharing between channels

Not all processors do omnichannel well. Ask for a demo of the unified dashboard.

Card-Present Checklist​

ItemQuestion to Ask
Terminal ownershipDo I own the hardware?
Terminal portabilityCan I use it with another processor?
CP vs CNP ratesWhat's my interchange for in-person?
Unified reportingOne dashboard for all channels?
Token sharingCan I charge a card saved in-store online?

Related: Card-Present Terminal Decisions

Level 2/3 Processing: B2B Savings​

B2B Sellers

If you sell B2B, ask about Level 2/3 processing rates. This can be meaningful savings on corporate and purchasing cards.

What Level 2/3 Data Is​

  • Level 2: Tax amount, customer code, merchant postal code
  • Level 3: Line-item detail (SKU, quantity, unit price)

Why It Matters​

Corporate and purchasing cards qualify for lower interchange when you submit Level 2/3 data. Savings range from 0.3% to 1.0%+ per transaction.

Level 2/3 Savings Example​

Card TypeStandard RateWith L2/3Savings
Commercial card2.95%2.15%0.80%
Purchasing card2.85%2.05%0.80%
Corporate card2.70%2.10%0.60%

On $500k/year in B2B sales, that's $3,000-$4,000 saved.

Operator Questions​

  • "Does your gateway support Level 2/3 data submission?"
  • "Do I need to change my integration to submit it?"
  • "What's the expected savings based on my card mix?"

Migration Planning​

When switching processors, plan carefully to minimize disruption.

Migration Checklist​

PhaseActions
Pre-migrationToken export confirmed, new processor approved, integration tested
CutoverUpdate payment endpoints, test live transactions, monitor errors
Post-migrationVerify settlement, confirm token migration, cancel old account

Common Migration Failures​

  1. Tokens didn't migrate → Customers forced to re-enter cards
  2. Webhook endpoints not updated → Missing payment notifications
  3. Old processor still charging fees → Forgot to cancel
  4. Settlement timing changed → Cash flow surprise

The 90-Day Rule​

Run both processors in parallel for 90 days if possible:

  • New transactions on new processor
  • Recurring/subscriptions migrated in batches
  • Old processor for remaining refunds and disputes

Where This Breaks​

  1. Legacy integration debt. If your checkout is deeply integrated with a specific processor's API, migration is a major project.

  2. Stored cards without portability. Subscription businesses can lose significant revenue from forced card updates.

  3. International expansion with cross-border complexity. US processors with "international support" often means cross-border (expensive), not local acquiring (cheaper).

Analyst Layer: Metrics to Track​

MetricWhat It Tells YouTarget
Auth rate by processorProcessor performanceOver 95% for domestic cards
Payout timingCash flow predictabilityT+1 to T+2 standard
Token migration success rateMigration health99%+
L2/3 qualification rateB2B optimizationOver 80% for eligible cards

Next Steps​

  1. Decide on integration method → Match to your resources and PCI appetite
  2. Confirm token portability → Get it in the contract
  3. Plan for omnichannel → If you have or plan in-person sales
  4. Ask about Level 2/3 → If you sell B2B

See Also​