Server to Server

XPay provides merchants with more structured types of solutions where sensitive data relating to the transaction (card data) are collected and managed directly by the merchant's servers.

Server to Server solutions allow complete customization of the payment experience, but are subject to obtaining the PCI DSS security certification (SAQ D questionnaire).

In the test area it is possible to try the Server to Server solutions even if you do not have the PCI DSS certification, but to make payments in production it is mandatory to provide Nexi with the SAQ D questionnaire, which must be verified before enabling the terminal of the merchant to operate.

For more information about certification, refer to the official website PCI Security Standards Council.

Below are the S2S payment types made available by Nexi:

• 3D Secure Payment: payment by card subjected to 3D Secure authentication.
• M.O.T.O.: intended for those who want to integrate the function of requesting authorization of payments by card on their system, whose data has been communicated by the cardholder to the merchant via email, telephone, etc... Not subjected to 3D Secure authentication.

3 Steps payments are subjected to 3D Secure authentication, the customer must be redirected to a specific address returned by XPay, which takes him to the authorization system of the card issuer, where he can proceed with the authentication for confirm the payment.