Authorize.net, though we don't really like it. The API is ugly and we can't update a recurring bill (so if someone changes their plan we have to ask for their payment info all over again). It's not enough of a priority to change it right now, because most of our clients pay us offline anyway, but eventually we'd like to move to something a little more modern.