Hacker News Reader

Comment by MichaelGG | Hacker News Reader

Are you going to help with PCI compliance, say, by letting us use JS to post card data direct to your site, and only returning an ID code?

View on HN

This please. It doesn't have to be JS, if I can just POST my form to their server, and have the user redirected back with a token that'll work just as well.

Braintree does this, but they're rather pricey.

I've wanted this feature bad enough I've considered launching my own service to do it. Surely there are a decent number of sites out there that want to retain control of their payment form, but want to seriously reduce PCI scope.

We (Braintree) are priced competitively. We may look higher than others because we don't use any pricing trickery ( http://bit.ly/cUyJTa ) and bundle gateway services. We created a checklist for merchants to help them avoid getting duped http://bit.ly/9W57Pw .

I should clarify. Braintree is perfectly competitive as long as you're handling some volume (20K/mo or so), and are willing to roll your gateway and merchant account into one provider. For smaller ventures, not so much.

It's actually between 2-5k per month, depending on average ticket. For merchants looking to maintain volumes less than that for the long term, other providers will cost less in monthly fees (but may have a higher total cost when including other items such as pci compliance, recurring solutions, etc.).

Reply on news.ycombinator.com