Features
Multiple Payment Types
Support for Credit Cards, ACH bank transfers, and card swipe devices (MSR90 compatible).
Secure Encryption
Client-side RSA-OAEP encryption with SHA-256 hashing for all sensitive payment data.
PCI Compliance
Built-in validation to prevent sensitive data from being entered in non-secure fields.
BIN Lookup
Automatic card type detection and surcharge eligibility checking via BIN (Bank Identification Number) lookup.
Payment Profiles
Save payment methods for future use with optional default payment method designation.
Real-time Validation
Form validation with immediate feedback for card expiration, bank account verification, and required fields.
Surcharge Management
Automatic surcharge calculation and adjustment based on payment type and card BIN eligibility.
Customizable UI
Configurable field visibility, button text, custom CSS styling, and dynamic form behavior.
Event-Driven
Comprehensive callback system for payment lifecycle events and form interactions.
Dynamic Resizing
Automatic iframe height adjustment based on content to prevent scrollbars.
Correlation Tracking
Built-in correlation ID support for request tracing across distributed systems.
Duplicate Prevention
Optional duplicate transaction detection to prevent accidental double charges.
Payment Processing Features
Transaction Types
- Authorization: Process one-time payments with immediate authorization
- Save Payment Method: Store payment information for future use without charging
- Pay and Save: Process payment and save payment method simultaneously
- Partial Payments: Optional support for partial payment amounts
Card Processing
- Support for all major card brands (Visa, MasterCard, Discover, American Express)
- Automatic card type detection via BIN lookup
- Card expiration validation
- CVV/CVV2 security code support
- Track 1 and Track 2 magnetic stripe data parsing
- Real-time surcharge eligibility checking
ACH Processing
- Support for checking and savings accounts
- ABA routing number validation
- Account number verification (double-entry)
- Account holder name and address collection
User Interface Features
Field Management
- Dynamic Field Visibility: Show or hide fields based on payment type and configuration
- Required Field Validation: Automatic validation of required fields with visual feedback
- Field Pre-population: Set initial values for known customer information
- Field Value Retrieval: Read current field values for custom validation
- Custom Field Visibility: Toggle individual fields on/off programmatically
Validation Features
- Real-time validation as users type
- Visual indicators for valid/invalid fields
- Custom validation messages
- PCI compliance validation to prevent sensitive data in non-secure fields
- Card expiration date validation against current date
- Bank account number matching validation
- Phone number formatting and length validation
Responsive Design
- Automatic iframe resizing based on content
- Mobile-friendly form layout
- Touch-optimized for mobile devices
- Automatic scroll-to-top on validation errors
Security Features
Data Protection
- Client-side RSA-OAEP encryption for all sensitive data
- Separate encryption keys for PAN (card/account numbers) and SAD (CVV/track data)
- Automatic clearing of plain-text values after encryption
- No sensitive data transmitted unencrypted
PCI Compliance
- Iframe isolation prevents parent page access to sensitive data
- Automatic detection of sensitive data in non-secure fields
- Pattern matching to identify potential card numbers
- Form submission blocked if PCI violations detected
Authentication & Authorization
- Bearer token authentication for all API requests
- Merchant ID validation
- CORS protection for cross-origin requests
- Content Security Policy enforcement
Integration Features
Communication
- Secure postMessage API for iframe communication
- Event-driven architecture with comprehensive callbacks
- Bidirectional data flow (parent to iframe and iframe to parent)
- Error and warning event propagation
Customization
- Custom CSS styling support
- Configurable button text
- Optional field visibility control
- Custom submit handling
- Configurable iframe dimensions
Developer Tools
- Correlation ID tracking for distributed tracing
- New Relic logging integration
- Comprehensive event logging
- Error tracking and reporting
- Debug mode support