Card processing
Accept Visa, Mastercard, Amex, Apple Pay and Google Pay with high approval rates and automatic recovery of soft declines.
cc3a is a card payment processor built for subscription brands. Accept cards and wallets, vault cards under PCI SAQ D, run recurring billing with smart dunning, and reconcile every cent in real time — on infrastructure you control.
From the first checkout to the thousandth renewal, cc3a handles processing, vaulting, billing, recovery and reconciliation so you don't have to glue five vendors together.
Accept Visa, Mastercard, Amex, Apple Pay and Google Pay with high approval rates and automatic recovery of soft declines.
Recurring plans, trials, pauses and cancellations with a billing engine that runs on a monitored cron and never double-charges.
Cards stored as cc3a tokens, PANs encrypted with AES-256-GCM, CVV never persisted. Saved cards work across your whole account.
Branded, no-code payment pages and shareable links in 16 languages and 20+ currencies — opaque tokens, never JWTs in the URL.
Built-in SCA, MIT exemptions, token & BIN blocklists (system / merchant / customer) and decline intelligence.
Full and partial refunds with race-safe balances, plus a complete chargeback lifecycle with evidence and deadlines.
MRR, ARR, ARPU, LTV, churn and approval rate — filter by merchant and date, with CSV exports built for your accountant.
Every event, delivery and retry captured at the transaction level — signed, replayable, and searchable for fearless debugging.
Charge in local currency and report in EUR with live FX refreshed every five minutes from trusted rate sources.
Professional, per-merchant branded invoices and receipts with business identity and logo — generated on payment, PDF-ready.
Get your API keys and a branded checkout. cc3a processes your card payments end to end — one contract, one integration.
Use the hosted checkout, a payment link, or the API. Cards are vaulted, 3-D Secure 2 is handled, and the buyer never sees a secret.
Turn a card-on-file into a subscription. Smart dunning retries failed renewals and the account updater refreshes expiring cards.
Watch revenue in real time, receive signed webhooks, export to your ledger, and hand customers branded invoices.
Revenue analytics, customers, transactions, subscriptions, disputes, webhooks, blocked tokens and per-merchant fees. Filter by merchant and date, drill into any charge, and export it all.
cc3a is engineered to PCI DSS SAQ D. Card data is encrypted, secrets live in the environment, and every action is logged and verifiable. The boring guarantees that let you sleep.
Full PAN stored only as AES-256-GCM ciphertext; CVV is used for the auth and never written to disk.
Credentials and card data are encrypted with rotating keys, kept out of source and out of logs.
Strong customer authentication with liability shift, plus MIT exemptions for frictionless recurring charges.
Every money and admin action is hash-chained and tamper-evident, with a one-click integrity check.
HMAC-signed deliveries with idempotency keys, automatic retries and a full per-attempt history.
A Luhn-aware scrubber strips any PAN from logs before they are ever stored.
Create a charge, vault a card or spin up a subscription with a single call. One integration covers cards, Apple Pay, Google Pay and recurring billing — no extra providers to wire up.
# Charge a vaulted card
curl /apiv2/v1/charges \
-H "Authorization: Bearer $CC3A_KEY" \
-H "Idempotency-Key: $(uuidgen)" \
-d '{
"token": "tok_9f2a…",
"amount": 4900,
"currency": "EUR",
"descriptor": "ACME-PRO"
}'
# → authorised, 3DS-checked, vaulted, webhook-signed
{ "status": "succeeded", "network": "visa", "3ds": "authenticated" }Set a percentage and a fixed fee per merchant. cc3a computes it on every succeeded payment and shows your platform margin in real time — no hidden rake.
For a single brand going live.
For multi-brand operators.
For scale, SLAs & custom rails.
Spin up the dashboard, generate a payment link, and watch the transaction land — with its full timeline — in under a minute.