Archive for the ‘Best Practices’ Category

Eliminate PCI Compliance With Hosted Order Automation

Tuesday, April 20th, 2010

An article in Internet Retailer Magazine discusses the cost burden Payment Card Industry (PCI) regulations place on merchants of various sizes.  Mind-bogglingly, the effort to maintain compliance and pass the annual audit can easily reach $1 million.  To help merchants eliminate this burden altogether, we at Vindicia announced today a new capability in CashBox called Hosted Order Automation (HOA), whereby merchants can completely offload their PCI cost to Vindicia.

Before explaining how HOA works, we’ll briefly describe the background. In a typical online CashBox transaction that’s paid by credit card, a customer who clicks the Buy or Checkout button on a merchant’s site sends his or her credit-card information–securely–to Vindicia for billing.  During that process is a moment in time when the transaction passes through the merchant’s server.  Even if the merchant immediately deletes that credit-card information, the very fact that it touched the merchant’s server requires that the merchant comply with PCI.  That’s true even if the merchant is working with a PCI Level 1 Service Provider in Vindicia.

With HOA, PCI regulations do not apply to merchants who use CashBox because, instead of passing through the merchants’ servers, all credit-card transactions go directly to CashBox.  Not only can those merchants continue to enjoy the other inherent capabilities of CashBox, they still retain control of their customer experience, that is, the look and feel and other user-interface components of the checkout page. Yes, having one’s cake and eating it, too, is actually possible in this situation.

To learn the details about HOA, read its data sheet. Feel free to contact Vindicia for more information or post questions to our community forum.

Oh Canada, or why TX success rates matter

Thursday, March 25th, 2010

Of late, Vindicia has been welcoming quite a few Canadian based gaming, software, and social media companies. We also work in partnership with Tier 1 payment providers like Litle and Chase Paymentech. This brings up an interesting issue as these merchants think through their business structure and monetization plans.

Visa and Mastercard rules require that for US dollar transactions be presented by a merchant as a US domestic transaction, the merchant must have a “presence” in the US. The card associations rules may seem confounding but they’re much to do about making sure that the associations comply with US regulatory requirements and so that the associations and the card issuing banks can have some confidence about the risk created by the merchant for any given transaction. This leads to a requirement that Canadian and other foreign domiciled companies have to set up a “presence” in the US. The alternative is to use a Canadian merchant account to present international transactions priced in US Dollars.

The extra effort  may seem painful, but that leads to an important consideration every company should be considering and that is the statistical likelihood that any given credit/debit card transaction will go through at any given time. One of the reasons that Vindicia has chosen to work with the very best payment providers is that, on average, those payment providers are more likely to complete a successful transaction. We often see prospective clients compare one of the top provider’s pricing to that of less capable providers and the variable most often missing in their ROI analysis that offsets their sometimes perceived higher cost is the change in revenue that an even .05% better success rate completing one time and subscription transactions creates in terms of dollars saved. When the cost of payment processing is less than 3%, it doesn’t take a lot of 97%+ transactions to offset small cost deltas between the pricing of the best in class and all the rest.

Returning to Canadian companies, analyzing the average likelihood of success of any given transaction shows that the slight extra effort is well worth it. Requests to bill a US customer from what appears to be a foreign (even just Canadian) bank will lower the statistical likelihood of each transaction that a Canadian merchant attempts as card issuers assign more risk to non domestic transactions. It takes very few incomplete transactions (from customers who wanted to buy from you!) to offset the small cost of creating a US subsidiary in a favorable US taxing area.

$40 Million

Wednesday, March 17th, 2010

In my previous post, I alluded to statistics that highlight how Vindicia CashBox helps clients retain customers and thus lift revenue streams.  In a press release issued at the Game Developers Conference in San Francisco in early March, we mentioned these numbers:

  • Over the past year, thanks to our retry logic, Account Updater, and other retention capabilities, our clients gained 10-25 percent more of the customers who failed in their initial attempts to renew subscriptions.  We have seen this trend across all the vertical markets we serve.
  • Take those percentages and aggregate the dollars across our client base over the past year, you get a total of $40 million.  More importantly, this number grows every day as we add clients and as our existing clients’ business expands.
  • Our transaction volume has risen by about 45 percent over the past year: We now handle about 250,000 transactions every day while remaining PCI-compliant at the highest levels for the fifth year.

Speaking of PCI compliance, its juxtaposition with cloud computing is catching more and more attention.  If you’re attending Cloud Computing Expo in NYC in April, check out our CTO Brett Thomas’s presentation.  You’ll hear something very novel that will radically change your thinking about PCI compliance in the cloud.  I promise.  Don’t miss that talk!

Experience Matters

Wednesday, March 3rd, 2010

Having spent nearly all of the last two decades working on billing systems, I’ve been through I-can’t-count-how-many different product selection exercises.  A typical scenario goes as follows:

  1. Someone in the organization decides that they’ve “had enough” and they start the ball rolling to select a new billing platform.
  2. A group of internal subject matter experts gather to consider the things a new billing system must do.
  3. These thoughts are collected in a “Requirements List”, which is watered, fertilized (and rarely, if ever, pruned).  The requirements list rapidly grows into a full blown RFP.
  4. RFP is sent to vendors.
  5. Shoes are shined, hair is combed, and promises are made that the platform being pitched will do exactly what you’ve asked.
  6. And then the real work begins…

The problem with this process is that it supposes that anyone out there has a billing system that matches exactly the way your team thinks of billing—and also that your team has nailed with 100% accuracy the needs of the organization not only today, but over the next 7-10 years.  I’ve been involved in projects ranging from straightforward SaaS deployments to “Enterprise Software” on up to “custom built” solutions.  No single delivery strategies has the corner on the market for success.

Many clients have told me that the one thing that tips the scales in favor of success is expertise.  Deploying a billing platform is a process filled with hundreds of small decisions.  Should I accept or reject this AVS return code?  Which screen layout will increase conversion rates?  When should we send email to our customers?  How should my retry cycle change based on my product offerings?  The key measurement of a services team is not only whether they know the answers to the questions, but do they know which questions to ask?  That is the key to maximizing value from the billing system.

My advice is simple:  when the experts gather and start watering the requirements tree, make sure they give consideration to the roots of the tree.  Make sure the services team of your billing partner can help guide you through not just the technical implementation, but the key business decisions that will have the greatest impact on your revenue.

Why the CCARDA matters to subscription services

Monday, February 22nd, 2010

Today marks the effective day of the Credit Card Accountability, Responsibility and Disclosure Act. Our friends at PaymentsNews posted a round up of the coverage over the weekend.

The changes that will most impact game, software, social networking, and online content companies have to do with the new requirements upon offers of credit to college students. College campuses had become one of the most effective new credit card customer acquisition tools for the credit card issuers. With the new rules, it’s going to be a bit harder for those of college age to establish new credit and thus the 18-22 year old market is going to have incrementally less buying power.

What this portends for subscription services is a shift in payment method mix to other alternates. Primarily it will mean a mix more strongly weighted toward debit cards for those services with large “under 25″ populations. This is on top of a general trend we’ve noticed after the credit contraction late last year toward debit being a larger percentage of subscription payment methods. Services should be reviewing their subscription business practices with the higher debit mix in mind.