- Transaction Stored Credentials regulations - enables merchants to identify initial storage and use of stored payment credentials. Within this framework merchants are required, among other things, to obtain cardholders’ consent to store the credentials and to inform the issuer (via a transaction) that payment credentials are now stored on file for future use.
- Merchant Initiated Transaction regulations - The regulation divide Transactions using stored credit cards (card-on-file) into 2 types:
- Cardholder Initiated Transactions (CIT) - A cardholder-initiated transaction is any transaction where the cardholder is actively participating in the transaction. This can be either at a terminal in-store or through a checkout experience online, or with a stored credential. An initial transaction of a subscription often falls in this category.
- Merchant Initiated Transactions (MIT) - There are different MIT categories and each require their own identifiers. For more details, see the References section. Merchants commonly initiate MITs without the active participation of the cardholder to perform a transaction as a follow-up to a cardholder-initiated transaction (CIT) or to perform a pre-agreed standing instruction from the cardholder for the provision of goods or services.
Vindicia Implementation of Card-On-File Regulations
Vindicia is integrated with many payment providers. Support for of the Card-on-file regulations is usually established by Vindicia during the integration. Each payment provider defines their own data elements to indicate that the credentials used are Card-on-File. Additionally, most payment providers return a token per subscription, which needs to be passed in subsequent calls. In general, all transactions made by Vindicia are categorized as using card-on-file, as they use stored credentials and use the stored payment methods that were supplied. Vindicia categorizes the validation transactions and initial transaction of a subscription as a Card holder Initiated (CIT) transaction, while recurring transactions are categorized as Merchant initiated transactions (MIT). For Vindicia Retain, we have added an option to receive the network token that the providers assigned to the original subscription transaction and we pass it to the payment providers as part of the healed transactions. Vindicia updated its integration with the following processors to support CIT/MIT indicators:- Adyen
- Bank of America
- Braintree
- Chase Paymentech (credit card and Apple Pay)
- CyberSource
- Edgil/PayWay
- FirstData FDMS Compass
- Ingenico/Global Collect
- Nuvei (For Retain only)
- Orbital
- PaySafe
- SmartPay
- Windcave
- WorldPay
- Vantiv Litle