Khaos Control credit card processing PCI-DSS

Khaos Control supports a number of external payment service providers (PSP), so credit cards can be charged and refunded from within the system. The PSP's currently supported by Khaos Control include:
-
CreditCall
-
SagePay (the PSP formally known as Protx)
-
Commidea (ICP)
-
Datacash
-
HSBC (Secure ePayments)
Khaos Control and our PSP partners are PCI-DSS compliant
In all cases, when the operator instructs Khaos Control to charge a card, an encrypted connection is made to the payment provider, the card details are transmitted, and the results displayed to the user, either that the card was authorised, or that the payment was refused. Normally the payment provider will offer you various options to combat fraud, for example CVV2 number or address verification checks. More in-depth fraud prevention checks are available from our PSP partners via providers such as CyberSource and The 3rd Man, for instance, velocity of use, velocity of address change, predictive scoring, etc., under control of user-defined business rules.
A variety of options are available from within Khaos Control to control how your cards are charged:
A variety of options are available from within Khaos Control to control how your cards are charged:
Payment can be taken at time of order, or at time of despatch
If your payment provider supports it, we can preauthorise the card at time of order, then authorise the payment at time of dispatch. This provides reassurance that the card is valid and allows invalid numbers to be caught as early as possible, while avoiding actually charging the customer until the items are ready to ship
Cards can be charged individually, or batch-charged from within our Invoice Manager if you wish to process groups of orders at once. The point at which the cards are charged is configurable, e.g., before orders are picked, or after picking but before printing shipping labels.
Refunds (e.g., due to returned goods) can be made back to the original card in a similar manner
We can import payment information from your website - either transaction details (if your website has already charged the card), or card details (if it has just captured the information). This may require integration work with your web developers.
We can also integrate with other providers when necessary!
Please be aware that not all payment providers will support every option (e.g., pre-authorisation), please verify this before selecting which provider to use.