Authorize.Net Hosted CIM with Recurring Profiles
Authorize.Net Hosted CIM with Recurring Profiles
Authorize.Net's Customer Information Manager (CIM) is a service that allows you to create and store customer profiles on Authorize.Net's secure servers for later use. This allows credit cards to be stored for future use outside of your own website, giving returning customers the convenience of not needing to re-enter that information each time they purchase.
Using Authorize.Net's Hosted CIM solution, all payment information is entered directly on Authorize.Net through iframe popups for the ultimate in payment security and PCI / PA-DSS compliance.
When a customer first checks out using the Authorize.Net CIM payment method, they are given a form to enter credit card details. If they want to change or remove this data at a later time, there is a new area in 'My Account' where they can manage all of their stored payment information.
A customer's stored cards can also be used through the Admin Panel 'Create New Order' interface. This means you only ever need to request that information once when taking orders by phone or other methods. Everyone saves time with each order, and your customers get peace of mind.
This payment module fully supports Magento's Recurring Profiles feature, allowing you to make multi-payment products, subscriptions or services without them going through Paypal. Billing is performed on whatever schedule you define, and you're always in complete control.
In short:
- Securely collect and store payment information with Authorize.Net Hosted CIM.
- Pay with a stored credit card when ordering from the store or Admin Panel.
- Manage stored cards as a customer or an administrator.
- Handle recurring payments without relying on Paypal.
- Allow customers to pay with ACH / eCheck bank payments (if enabled at Authorize.Net).
PCI Compliance, Authorize.Net CIM, and You
Authorize.Net's Hosted CIM solution is a huge benefit for anyone concerned with PCI compliance. All payment information (credit card info, address, account numbers) is collected directly by Authorize.Net and stored on Authorize.Net's own servers. Since no card holder data ever touches your server, this payment method is considered 'out of scope' for PCI and PA-DSS compliance.
It is still your responsibility to ensure your e-commerce store does not violate PCI compliance. You should work with a Qualified Security Assessor (QSA) to determine this. In particular:
- You must have SSL enabled for login, registration, and the complete checkout process.
- Any alternate payment methods may still be in scope for PCI compliance.
- It is vital to maintain strict security standards for all administrators and for the web server.
</ul>
- Authorize.Net: PCI and You
- PCI DSS v2.0 eCommerce Guidelines (PDF)
If you are not satisfied, we offer a refund for seven days after purchase.
Can't make up your mind? Contact us by phone or email to talk with our team of Magento specialists.
Contact Information
ParadoxLabs, inc
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Phone: 717-431-3330
