> ## Documentation Index
> Fetch the complete documentation index at: https://docs.poly.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# PCI Pal

> Integrate PCI Pal for secure, compliant payment processing during calls.

Use [PCI Pal](https://www.pcipal.com/) to take secure phone payments while staying PCI DSS compliant. Callers are transferred to PCI Pal's secure environment to enter card details, then returned to your agent with a payment confirmation.

<Note>This is a managed integration. Contact your PolyAI account manager to enable PCI Pal for your project.</Note>

## How it works

<Steps>
  <Step title="Payment trigger">
    When a caller needs to pay, the PolyAI agent initiates a PCI Pal session.
  </Step>

  <Step title="Secure transfer">
    The call is transferred to PCI Pal's secure environment where card details are captured.
  </Step>

  <Step title="DTMF masking">
    Card numbers entered by keypad are masked and never exposed to the call recording.
  </Step>

  <Step title="Payment processing">
    PCI Pal processes the payment through your configured payment gateway.
  </Step>

  <Step title="Return to agent">
    After completion, the caller is transferred back to the PolyAI agent for confirmation.
  </Step>
</Steps>

## Capabilities

<CardGroup cols={2}>
  <Card title="Secure card capture" icon="shield-halved">
    PCI DSS Level 1 compliant payment collection.
  </Card>

  <Card title="DTMF payment" icon="grip">
    Callers enter card details on the phone keypad.
  </Card>

  <Card title="Real-time authorization" icon="bolt">
    Immediate payment confirmation.
  </Card>

  <Card title="Payment status" icon="circle-check">
    Success or failure is passed back to the agent so it can continue the conversation.
  </Card>
</CardGroup>

## Getting started

### Prerequisites

* A PCI Pal account with API access
* Your payment gateway credentials configured in PCI Pal
* PolyAI project access

### Set up

<Steps>
  <Step title="Obtain PCI Pal credentials">
    Contact PCI Pal to obtain the following values:

    | Credential           | Description                             |
    | -------------------- | --------------------------------------- |
    | **Tenant name**      | Your PCI Pal tenant identifier          |
    | **Username**         | API username                            |
    | **Client ID**        | OAuth client identifier                 |
    | **Client Secret**    | OAuth client secret                     |
    | **Auth endpoint**    | Authentication URL                      |
    | **Session endpoint** | Payment session URL                     |
    | **Flow ID**          | Your configured payment flow identifier |
  </Step>

  <Step title="Configure your payment flow">
    Work with PCI Pal to configure:

    * Payment amounts and currencies
    * Card types accepted
    * Retry logic for failed payments
    * Confirmation messaging
  </Step>

  <Step title="Share credentials with PolyAI">
    Securely share the PCI Pal credentials with your PolyAI representative. PolyAI stores them as encrypted secrets.
  </Step>

  <Step title="Test in sandbox">
    1. PolyAI configures the integration in your sandbox environment.
    2. Run test payments using PCI Pal's test card numbers.
    3. Verify successful processing and the return-to-agent flow.
    4. Deploy to production once testing passes.
  </Step>
</Steps>

## Caller experience

A typical payment sounds like:

<Steps>
  <Step title="Agent hands off">
    *"I'll now transfer you to our secure payment line."*
  </Step>

  <Step title="PCI Pal prompts for card">
    *"Please enter your 16-digit card number using your keypad."*
  </Step>

  <Step title="Caller enters card via DTMF">
    Digits are masked in the recording and never seen by the agent.
  </Step>

  <Step title="PCI Pal confirms and returns">
    *"Payment successful. Transferring you back."*
  </Step>

  <Step title="Agent confirms">
    *"Thank you, your payment of \$50 has been processed."*
  </Step>
</Steps>

## Security

* **PCI DSS compliance** — PCI Pal is certified Level 1 PCI DSS compliant.
* **No card data storage** — PolyAI never stores or has access to card details.
* **Encrypted transmission** — All payment data is encrypted in transit.
* **Recording pause** — Card entry is automatically excluded from call recordings.

## Limitations

* **Voice entry** — Card numbers must be entered by keypad, not spoken.
* **Transfer required** — Caller experiences a brief transfer to the payment system.
* **Single payment** — Each session handles one payment transaction.

## Support

* Contact your PolyAI account manager for integration assistance.
* Contact PCI Pal support for payment gateway issues.

## Related pages

<CardGroup cols={2}>
  <Card title="Stripe" href="/integrations/stripe" icon="stripe">
    Alternative payment processing integration.
  </Card>

  <Card title="Managed services" href="/integrations/managed-services" icon="handshake">
    Other managed integrations requiring account manager setup.
  </Card>
</CardGroup>