---
title: "Checkout and card data · Agent Wranglers"
url: https://agentwranglers.se/playbook/payments/checkout-and-card-data
updated: 2026-10-20
licence: "All rights reserved"
---

# Checkout and card data

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

> Let the provider hold card data, handle 3-D Secure in every flow, keep prices on the server and test every outcome with test cards.

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers payments playbook: https://agentwranglers.se/playbook/payments/checkout-and-card-data`.

## Required

- [Choose a checkout that keeps you on SAQ A](https://agentwranglers.se/playbook/payments/checkout-and-card-data/pci-saq-a-integration): Take card details only through the provider's hosted payment page or its iframe fields, so you qualify for the shortest PCI DSS self-assessment, SAQ A.
- [Handle 3-D Secure in every card flow](https://agentwranglers.se/playbook/payments/checkout-and-card-data/strong-customer-authentication): Send every card payment the customer starts through the provider's 3-D Secure step, and handle the result that asks for customer action.
- [Save cards with consent and charge renewals off-session](https://agentwranglers.se/playbook/payments/checkout-and-card-data/off-session-payments): To charge a card later, save it at the first payment with SCA and the customer's consent. Mark each later charge as merchant-initiated.
- [Keep prices in a versioned catalogue](https://agentwranglers.se/playbook/payments/checkout-and-card-data/price-catalogue): Keep every price in one server-side catalogue with a stable ID, and create a new price instead of changing the amount of one in use.
- [Keep test and live modes apart](https://agentwranglers.se/playbook/payments/checkout-and-card-data/test-and-live-keys): Use the provider's test mode in every environment except production, and make the app refuse to start with a live key anywhere else.
- [Test every payment outcome with test cards](https://agentwranglers.se/playbook/payments/checkout-and-card-data/payment-test-scenarios): Keep one automated test for each payment outcome, using the provider's test cards and test clocks, and run them before every release that touches payments.

- Next: [Amounts and orders](https://agentwranglers.se/playbook/payments/amounts-and-orders)
- [All chapters](https://agentwranglers.se/playbook/payments)