Skip to main content

PCI Engagement Notification

Overview​

The PCI Engagement Notification system provides alerts when a user or agent enters or exits a PCI data collection screen. This allows merchants and integrated systems to be aware of when sensitive information is being handled. A PCI Flow (or PCI data collection screen) is any user interface designed to collect sensitive payment details, such as credit card or bank account information. When a user interacts with these forms, the onEvent callback is triggered, signaling to the integrated system that sensitive information is being handled.

Supported Experiences​

Usage​

To receive PCI notifications in an embedded environment, you must pass a callback function to the onEvent handler during initialization. This function will be invoked whenever the status of the PCI session changes. For more details, please see the Embedded Environment onEvent section.

When a user enters or exits a PCI form, the onEvent callback is triggered with a SESSION_CONTEXT_UPDATED event. The payload of this event contains the status of the PCI session, which your application can use to take appropriate action.

Interpreting the Notification​

Within the event's data object, the sessionContext.pci.active property indicates the current state:

  • sessionContext.pci.active = true This means the user has entered the PCI flow.
  • sessionContext.pci.active = false This means the user has exited the PCI flow.

Example Notification Payloads​

Notification for Entry into a PCI flow​

This event is sent when a user navigates to a screen to input card or bank account details.

{
  "title": "SESSION_CONTEXT_UPDATED",
  "data": {
    "sessionContext": {
      "pci": {
        "active": true
      }
    }
  }
}

Notification for Exit from a PCI flow​

This event is sent when the user navigates away from the card or bank account entry screen.

{
  "title": "SESSION_CONTEXT_UPDATED",
  "data": {
    "sessionContext": {
      "pci": {
        "active": false
      }
    }
  }
}

Things to Keep in Mind​

  • Compatible with all supported payment methods (card, bank account)