Transact
Aiphoria Transact helps you meet PCI DSS standards when handling card payments over the phone or digital voice channels.
It keeps your agents out of scope while protecting your customers.
- Supports payments via voice IVRs, live agents, and digital channels (chat, SMS, and email).
- Fully secured and PCI compliant.
System Integrationβ
Ingressβ
- Can run as a standalone web app or embedded within an existing system such as a CRM or MS Teams implementation.
- Data can be proxied via query string parameters.
- Any provided data can be displayed to the agent or passed to the PSP.
Egressβ
- On completion of capture or payment, Transact can:
- Send data via HTTP POST from either the browser or datapost service
- Redirect to a known location
- Display relevant fields to the agent
Live Agent Journeysβ
Flow & Launchβ
- Agent triggers Transact launch via a web link.
- The URL contains:
- Account reference
- Configuration name (maps to JSON file describing the journey, fields, PSP integration).
- Agent name
- Agent selects βPay by Phoneβ to begin.
Correlationβ
The method of linking the agentβs web session with the customer call:
- Automatic: Transact can automatically correlate if the parent app (e.g. Teams Call) passes call metadata.
- Manual:
- DTMF: Automatically generated ditits (e.g.
#974##) are typed into the Agents handset. - Search: Agent searches for the live call and selects it.
- DTMF: Automatically generated ditits (e.g.
Once correlation succeeds, the capture screen loads.
Captureβ
- Agent requests the customer to enter card details via their handset.
- Real-time capture status updates shown.
- Card scheme validated (PAN length, CSC).
- Luhn check performed.
- Once valid, Submit becomes active.
Completionβ
On form submission, configurable actions include:
- Payment β Request to PSP
- Datapost β Sends configured transaction information to the designated endpoint
- Redirect β Navigates to the designated endpoint with configured transaction information
- Completion screen β Show capture/PSP result to agent
Digital Channel Journeysβ
Flow & Launchβ
- Agent triggers Transact launch via a web link.
- The URL contains:
- Account reference
- Configuration name (maps to JSON file describing the journey, fields, PSP integration).
- Agent name
- Agent selects βPay by Linkβ to begin.
Channelβ
- Depending on configuration, the agent chooses a channel (e.g. SMS, chat) to send the secure link.
Captureβ
- Customer opens the link; agentβs screen switches to capture view.
- Capture page can include branding and use the customerβs domain.
- Customer enters card details manually or via browser autofill.
- Only when both sides (customer + agent) complete mandatory fields does Submit activate.
Completionβ
On form submission, configurable actions include:
- Payment β Request to PSP
- Datapost β Sends configured transaction information to the designated endpoint
- Redirect β Navigates to the designated endpoint with configured transaction information
- Completion screen β Show capture/PSP result to agent
IVR Channel Journeyβ
Flow & Launchβ
- IVR establishes Transact capture session via Transact API
- The API contains:
- JWT
- sipCallId (The Id of the Call to secure).
Captureβ
- IVR requests the customer to enter card details via their handset.
- IVR is sent zeros in place of DTMF tones
- Card scheme validated (PAN length, CSC).
- Luhn check performed.