Card numbers never reach you, or us
Short answer
Your customer types their card on a secure page hosted by the bank, so the full number never touches your website, your dashboard or our systems. That is what "PCI SAQ A for you" means.Verified 2 November 2026
In this article
What we see
When your customer pays, the card number goes from their device to the bank’s page and nowhere else. We get back the card’s brand, its last four digits and its expiry, and that is all we ever show you.
PCI SAQ A for you
The card industry’s security rules, PCI DSS, ask every business that takes cards to fill in a questionnaire. A business whose customers type their card on someone else’s page answers the shortest one, SAQ A. That is your position with us: "PCI SAQ A for you".
You still answer it yourself, if your bank asks. It is short because the card number never reaches you.
Keep it that way
- Never ask a customer to send you their card number, by message, email or phone.
- Never write one down.
- If someone sends you one anyway, delete it, and ask them to pay through a link.