Payment gateway
The gateway commonly supplies checkout or API connectivity, securely transmits payment data and routes technical messages. It may not underwrite the merchant or settle funds.
Payment companies often combine several roles under one brand, which makes provider comparisons confusing. The useful question is not the label alone, but who supplies connectivity, underwriting, regulated payment services, settlement and operational support for the merchant’s route.
Send a private payment briefOne company may perform several roles, while another route may combine multiple specialists under separate contracts.
The gateway commonly supplies checkout or API connectivity, securely transmits payment data and routes technical messages. It may not underwrite the merchant or settle funds.
A PSP packages payment acceptance or related services for merchants and may combine gateway, acquiring access, local methods, risk tools, reporting and support.
The acquirer contracts for card acceptance, underwrites the merchant for that acquiring relationship and participates in clearing and settlement under card-scheme rules.
A processor handles transaction messages and records; an orchestration platform may connect several providers, route transactions and centralise integration without replacing provider approval.
Open Banking, A2A, wallets, vouchers and payout specialists may support non-card flows with their own eligibility, settlement and integration model.
The merchant still owns accurate onboarding information, lawful market access, customer terms, operational controls, reconciliation and compliance with its provider agreements.
Resolve contractual and operating responsibility before comparing interface features or headline coverage.
Identify the entity making the compliance and risk decision and whether separate approval is required for each route or method.
Document the regulated party, settlement account, currencies, timing, reserves and what happens to funds during refunds or disputes.
Confirm APIs, tokens, webhooks, reporting, support boundaries and whether the merchant can migrate or add a backup provider.
Set escalation paths for failed payments, delayed settlements, reconciliation gaps, fraud events and provider-side changes.
Labels are not enough because one company can perform several roles and one payment route can combine several companies. A usable architecture records who contracts with the merchant, who makes the risk decision, who handles transaction data, who controls settlement and who responds when the route fails.
| Architecture question | Evidence to prepare | Failure caused by leaving it unclear |
|---|---|---|
| Who approves the merchant? | Contracting entities, regulated roles, onboarding forms, required documents and the party issuing the final approval or decline. | The project treats a technical gateway integration as proof that an acquirer or payment provider has approved the merchant. |
| Who routes the transaction? | Checkout, gateway, processor and orchestration diagram with tokens, authentication, webhooks, routing rules and retry ownership. | Two suppliers both assume the other owns authentication, token portability, retries or incident investigation. |
| Who moves and settles funds? | Acquiring or payment-rail contract, settlement account, currencies, timing, reserves, fees, refunds and dispute funding. | The commercial proposal does not identify the regulated funds-flow owner or the merchant cannot reconcile net settlement. |
| Who operates the route? | Support boundaries, monitoring, reconciliation, incident severity, escalation contacts, change control and backup procedure. | A live failure has no accountable owner, or the fallback route depends on tokens and data that cannot be moved. |
A practical brief can use one row per component: checkout, gateway, orchestration, processor, acquirer, alternative method and payout rail. Each row names the contracting party, regulated role, data handled, underwriting owner, settlement responsibility, currencies, reports, support boundary and exit dependency. This makes overlapping claims visible before contracts and integration work begin, without publishing provider identities or private commercial terms.
Legal entity on each agreement, service description, regulated responsibility, approval dependency and termination or migration condition.
Checkout fields, card or account data, tokens, authentication, routing, webhooks, reporting and access-control ownership.
Customer authorisation, clearing, settlement, reserves, refunds, disputes, payout and reconciliation from gross to net.
Monitoring, support hours, incident owner, escalation, change notices, backup route, reporting and finance responsibilities.
OfferPSP can check a responsibility matrix in 1–2 business days and use approximately 3–10 business days as a planning range for initial discussions with relevant providers after the merchant profile is complete. Underwriting, contracting, data review and integration usually take several additional weeks. These are planning estimates, not a provider SLA or a promise that a route will be approved.
Specific, current information improves the quality of every provider conversation.
A PSP is not necessarily the same as a payment gateway. A gateway commonly provides technical connectivity, while a PSP may bundle connectivity with payment services, underwriting access, reporting and support.
A PSP is not always an acquirer. Some PSPs acquire directly, while others connect merchants to one or more acquiring or payment partners; the contract and funds flow identify the actual roles.
A merchant can use one gateway with several PSPs when the gateway or orchestration layer supports the providers, token and data model, routing logic and operational reconciliation required.
The provider or acquiring entity responsible for the route makes the compliance and underwriting decision. A gateway or intermediary cannot guarantee that approval.
We structure the entity, GEO, method, currency, flow, integration and settlement requirements, then assess which provider roles and routes are relevant for a controlled introduction.
Share the company, target GEOs, vertical, methods, volume and current constraint. We will assess the next useful step without publishing your provider search.