CyberSource Secure

Acceptance

Businesses are striving to meet consumer expectations and increase checkout Accept payments from any
conversion rates by providing a fast, easy checkout experience. But at the customer-owned device
same time, these businesses must maintain tight security for sensitive
customer payment data—theft of that data could lead to lawsuits, fines, without handling sensitive
a damaged reputation, and erosion of customer loyalty. payment information.

CyberSource Secure Acceptance KEY FEATURES

CyberSource can help your business meet consumer expectations
and deliver a frictionless checkout experience while helping to protect
Mobile support: Automatically detects the customer’s screen
sensitive data. CyberSource Secure Acceptance is a set of connection resolution and renders appropriately on any device, from
methods that allows you to accept payments from consumers without smartphones to desktop PCs.
sensitive payment data entering your network. When implemented
with CyberSource Tokenization, you can conduct all your payment Global coverage: Includes out-of-the-box checkout templates
processing functions without handling sensitive payment data, thus in 28 languages,1 covering 40+ countries.
significantly reducing Payment Card Industry Data Security Standard
(PCI DSS) compliance scope. Branding support: Provides standardized forms that require
no additional coding. You can incorporate your branding
Secure Acceptance connections seamlessly integrate with a wide
range of CyberSource solutions, including Payment Tokenization, elements, and modify to match your look and feel.
Payer Authentication, Decision Manager, Visa Checkout, PayPal
Express Checkout, and ACH processing.
Optimized for research and analysis: Enables you to conduct
analyses such as A/B testing. Since each order can be assigned
a different profile, multiple segments and payment variables
Secure Acceptance Web/Mobile can be tested quickly and easily.
CyberSource Secure Acceptance Web/Mobile is a fully outsourced
hosted solution that passes payment data directly from the customer Payer Authentication support for major credit cards:
to secure CyberSource servers. With proper implementation of this Supports Verified by Visa, MasterCard SecureCode, American
solution, eCommerce businesses can qualify for PCI DSS Self-Assessment
Questionnaire (SAQ A), which significantly reduces PCI DSS scope. Express SafeKey, and JCB J/Secure.

Secure Acceptance Web/Mobile can be implemented as a redirect

Support for multiple payment methods: Supports
solution, or embedded in an iframe on your site. The payment flow, as Visa Checkout, electronic check (ACH), and PayPal Express
well as the look and feel, can be customized to match your website. Checkout without additional development effort.
Secure Acceptance Web/Mobile also helps minimize development Americans with Disabilities Act (ADA) compliance:
effort. You can add and configure payment acceptance methods such Complies with ADA guidelines.
as PayPal, Visa Checkout, and electronic checks through the business
center portal. Only one request is needed to execute multiple
payment functions such as Rules-Based Payer Authentication, fraud
screening, authorization, and capture.
CYBERSOURCE SECURE ACCEPTANCE

Secure Acceptance Flexible Token API KEY FEATURES

CyberSource Secure Acceptance Flexible Token API is a partially
outsourced solution that enables you to securely transmit card data
Patent-pending double encryption: Protection of the
from your customer directly to CyberSource and receive a token in “pipe” and payload such that even if one level were to be
exchange. Your customers’ card numbers are encrypted on their compromised, the underlying card data would remain secure.
own devices, inside a browser or native app, and sent directly to
CyberSource. As a result, card data bypasses your systems, typically Complete control of the customer experience: Allows you
qualifying you for SAQ A-EP. On-device encryption helps protect to gain full control of the design and customer experience
your customers from attacks on network middleware—such as without requiring compromise for security protection.
app accelerators, data loss prevention (DLP) solutions, and content
delivery networks (CDNs)—and also from malicious hot spots. Total control over the payment experience: Integrates
with your existing checkout flow using a background AJAX
Secure Acceptance Flexible Token API gives you complete control
over the customer’s payment experience, including the flow and user request to tokenize the card. This token can be used for
interface. The Flexible Token API—a JSON-based RESTful service— securely performing other CyberSource services.
focuses on tokenizing card data. You can create separate calls
(through additional development effort) for authorization/capture, Support for new, innovative payment experiences:
Rules-Based Payer Authentication, Decision Manager, and other Secures in-app payment experiences and Internet of Things
payment functions. (IoT) solutions, plus any devices connected to the Internet.
Simple integration: Consists of two small, RESTful APIs: a
server-side request to create a public key, which can be used
to encrypt the card number; and a client-side request to create
a token from a card number that is optionally encrypted.

Which Secure Acceptance Option Is Right for You? At-a-Glance Comparison

Secure Acceptance Web/Mobile Secure Acceptance Flexible Token API
PCI DSS implications Fully outsourced hosted solution. Could qualify Partially outsourced hosted solution. Could
you for PCI DSS Self-Assessment Questionnaire help you qualify for PCI DSS Self-Assessment
(SAQ A). Questionnaire (SAQ A-EP).
User experience and Pages can be customized to mirror your You have complete control over the design and
checkout flow branding. Checkout flow is predetermined. customer experience.
Platforms supported Designed for web. Works across web and native applications.
Payment processing Payment services can be executed through the Additional development effort required for payment
impact same call, minimizing development effort. authorization, capture, and other services.
Deployment and Can be implemented as a redirect solution Uses a JSON-based RESTful service to obtain
configuration or embedded within an iframe. Payment a token.
preferences are configurable through the
Business Center portal.
Integration method Web redirect or iframe. RESTful API.
Business Ideal for businesses wanting to minimize PCI Ideal for businesses wanting to minimize PCI DSS
requirements DSS scope, access pre-built templates, and scope while retaining total control of the user
easily configure payment acceptance through experience and payments process.
the portal.

1
Languages supported: Arabic, Bahasa Indonesia, Bahasa Melayu (Malay), Chinese – Traditional , Chinese –Simplified, Catalan, Croatian, Czech, Danish, Dutch, English, French, Finnish, German, Greek,
Hebrew, Hungarian, Italian, Japanese, Khmer, Korean, Polish, Lao, Norwegian, Portuguese (Brazilian), Russian, Slovak, Spanish, Swedish, Tagalog (Philippines), Thai , Turkish, Vietnamese.

CyberSource is
CONTACT US: t. +1 888-330-2300 e. [email protected] w. cybersource.com a Visa solution
© 2017 CyberSource Corporation. All rights reserved.