Introduction: Why integrating credit card form via iframe?

Dear Developer

This documentation is for implementation partners who want to keep the credit card form as part of their checkout or rather their donation form. Or in other words: you would like to have the credit card form visible as part of your form and don’t want to display the credit card form after submitting your own form to our API. If you are interessed in the latter scenario you can omit all credit card relavant fields. and just set the corrsponding payment_method (e.g. vis, eca or amx).

So now let’s start with some background information.

The Payment Card Industry Data Security Standard (PCI DSS) is a widely accepted set of policies and procedures intended to optimize the security of credit, debit and cash card transactions and protect cardholders against misuse of their personal information. The PCI DSS was created jointly in 2004 by four major credit-card companies: Visa, MasterCard, Discover and American Express.

The Payment Card Industry Security Standards Council requires that all companies, including third party service providers, that are involved in the transmission, processing or storage of credit and debit card data, must adhere to the PCI Data Security Standard on an ongoing basis and demonstrate compliance.

For merchants who fully outsourced all cardholder data functions can attest their compliance with a Self-Assessment Questionnaire called “PCI DSS SAQ A”. All cardholder data fully outsourced means that even the credit card form is not hosted on the own website. It has to be provided by RaiseNow within an iframe. The interaction between your form and the provided credit card form is based on Javascript’s postMessage

Don’t worry if you use one of our widgets this is already included.

The following sections explain how to interact with the credit card form if you don’t use a widget.