Integration Sign Off Key Points

Guide to assist in understanding and prepare for your integration review .

In order to have a deeper understanding in our integration approval process, we have listed the general flow of what we expect when we schedule an integration review:

1. A meeting scheduled which includes our Integration team, Compliance manager and your Partner manager in order for you to demonstrate the flow from beginning to end from the customer/merchant point of view.

   1. We are happy for you to supply us with your own testing environment for us to conduct testing within your systems.

2. During the review, we confirm whether you are using the offered Worldpay for Platforms hosted services or have developed your own payment page.

   1. As you may be aware, the Worldpay for Platforms hosted pages are pre-built and ready to go out the box with minimal extra requirements from your side in regards to PCI compliance.

   2. If you have developed your own payment page, you can ensure you are compliant by using our Payment Page Requirements and eDDR page requirements documents.

      1. Some key requirements when building your own page:

         • You are required to send a copy of the direct debit confirmation to the customer and also store the direct debit confirmation to provide as evidence should a dispute be initiated. This a requirement set by the Bank.

         • Have you included a transaction fee breakdown on the payment page if the fees are passed to the payer.

         • Currency code displayed

3. Depending on the above, confirm all the types of payments your software will be processing:

   1. Bank Account debits

   2. Card debits

   3. Real-time eCommerce payments

   4. BPAY

   5. PayTo

   6. POS

4. If you are using our accepting direct debit transactions that are processed through via the banking system, ensure you are using the ‘GET Search for transaction status changes’ API endpoint to determine the status of a scheduled payment along with 'POST Acknowledge transaction status change' to acknowledge the transaction statuses correctly. You can Poll the ‘GET Search for transaction status changes’ call once every hour, however if you acknowledge all the transactions, the rate limit resets immediately.

   • This is demonstrated in the API flows below:

     • Worldpay for Platforms eDDR (electronic Direct Debit Request)

     • Accept bank direct debits - Partner software managed payment page

5. If you are using our Hosted Payment Page for real-time eCommerce transactions, ensure you are using the ‘GET Token Lookup’ API endpoint to determine the transaction result in real-time.

   • This is demonstrated in the API flows below:

     • Worldpay for Platforms HPP (Hosted Payment Page)

6. We ensure you have tested rejected payments so your system handles the failed payment attempt correctly and your application manages the flow in order to direct the end user to be able to attempt a new payment.

7. Confirm fee structure for compliance (business paid or payer paid transaction fees)