Export Credit Card information from Paya Vault

We have a client that would like to export their customer credit card information from Paya's Vault so that they can upload it to another payment processor.   They do NOT use Paya for their payment processing at this time, they just store the credit card number there.  I don't believe this can be done, but I wanted to check to be sure that I am correct.

Thanks.

Sue

  • Even though they don't use Paya, the cc's should be present in the Vault, of which Paya might be able to assist.

  • Integrated Sage 100 enhancements (like APS / Repay) handle this as part of their install / activation (since their program is designed to read Paya data using the BOI). 

    If you're expecting to be able to get something like a spreadsheet, that would not be "PCI Compliant", but a Sage 100 Master Developer could probably set something up (if you're talking about an impossible volume of data to copy manually).

  • FormerMember
    FormerMember

    Hi Sue,

    Paya Connect has a RESTful API you could use to retrieve CC info. Sage 100 doesn't store the CC number in it's 'vault', only the GUID reference to it in the Paya vault. My understanding is if you don't save the CC info in AR_CustomerCreditCard then once the transaction is finalized it is removed from Paya.

    Is this a one time export or ongoing? If using Postman with Paya there is a template available that predefines the API structure making calls easier.

  • Yes there is a way to get this information. As Kevin has mentioned that some other processors have a process in place to convert from Paya to them.

  • FormerMember
    FormerMember in reply to T-Man

    There seems to be as many CC processing options as cloud hosting. 

    If a customer uses a phone based payment service like Android Pay, the credit card number is dynamically created and voided once the transaction is completed. 

    I'm not a big fan of companies having access to a customer's CC number or CVV.. This should be maintained at the processor level.

  • in reply to FormerMember

    There are a handful of CC Processors that actually integrate with Sage. There are tons that may say they do but really don't. CVV should never be stored as it is against PCI Compliance. It may prompt for it when you enter but that is to only say that the card was present. Once it was entered and saved it doesn't store the CVV as the card is not present when it is used again. 

    Vault only accounts have to be able to see the CC in order to use the CC to process outside of Sage. I would agree that it is better to always use an integrated processor than use the Vault only account and manually enter this info each time you use it in another processor. This way there should not be a reason to view the CC. The more you can say you do not have access to the info the more protected you are when people look for the reason for a breach in security. 

  • FormerMember
    FormerMember in reply to T-Man

    Hi Todd,

    What payment processors besides Paya is fully integrated with Sage 100? Does the Paya Quick Invoice feature work with 100?

  • in reply to FormerMember

    There are a few (Others may be available but these are the main ones)

    Paya
    Repay
    Century
    VelocIT
    Fortis

    Are the main ones that integrate. There are others that may use a developer modification for CC processing, but it changes how payments are processed and is a different workflow than the ones that integrate like Paya. There are also others that integrate with customizer that handles it outside of Sage but then writes back to Sage where needed.

    Yes, the Quick Invoice feature works with Sage 100 and most of the other providers have something like it as well as other features/functions.

  • FormerMember
    FormerMember in reply to T-Man

    Thanks Todd for the info!