braintreepci-compliancepayment-request-api

Braintree hosted fields with PaymentRequest API


I'm using braintree and their hosted fields solution to be applicable for the easiest to qualify PCI level of compliance - SAQ A. Google recently announced their PaymentRequest API which provided a great user experience, however it makes available sensitive card details to my website's js, which will make me ineligible for SAQ A.

Is there a way to use PaymentRequest API with Hosted fields, or should I become SAQ A-EP to be able to take advantage of the new feature?


Solution

  • Full disclosure: I work at Braintree. If you have any further questions, feel free to contact support.

    Braintree does not officially support the PaymentRequest API with Braintree's Hosted Fields at this time. This could change in the future.