Payments and POS integration
Card payments and POS connected end to end, from terminal to ledger
ISO 8583 and gateway integrations, EMV terminals, acquirer settlement files, and POS to ERP sales and stock sync.
Overview
A card payment touches several systems in a few seconds: the terminal or checkout, a payment gateway, the acquirer, the card scheme and the issuer. A day later the money and the fees arrive in settlement files that someone has to match to the sales in your ERP. A store sale changes stock, prices and the ledger too. When these systems disagree, finance chases differences by hand.
We integrate EMV terminals and online checkouts with payment gateways and acquirers, using ISO 8583 where the acquirer speaks it and the gateway’s API where it does not. We process settlement and fee files, and connect POS systems to your ERP so sales, returns, stock and prices stay in step across every store.
We design to keep card data out of your systems wherever possible, using tokenisation and hosted payment pages, which reduces the part of your estate that PCI DSS applies to. Every flow is tested with the provider’s test environment, piloted in a small number of stores and monitored once it runs.
What we deliver
Payments and POS landscape
Every terminal type, checkout, gateway, acquirer and POS system in scope, with the formats and settlement cycle of each.
Gateway and acquirer integration
Authorisation, capture, refund and reversal flows, over ISO 8583 or the provider’s API, with each response code handled.
Terminal integration
EMV chip and contactless terminals connected to your POS or kiosk software, with the provider’s terminal protocol.
Tokenisation and PCI DSS scope
A design that replaces card numbers with tokens, and a written view of which systems remain in PCI DSS scope.
Settlement file processing
Acquirer settlement and fee files collected, validated and turned into postings your ERP can match.
POS to ERP sync
Sales, returns, voids and end-of-day totals posted from every store to the ERP, once and only once.
Prices, promotions and items
Item data, prices and promotions sent from the ERP to the POS, so every till sells at the right price.
Payments reconciliation
Matching of sales, authorisations, settlements and payouts, with differences listed for your team to clear.
Test and certification support
Test scripts and evidence for the gateway’s or acquirer’s certification, and support through each round of it.
Monitoring and alerts
Alerts for declined-rate changes, missing settlement files, stores that stop posting and terminals that go quiet.
How we work
- 01
Map the payment and store flows
We follow a sale from the till to the ledger with your finance, store and IT teams, and agree the scope.
- 02
Design the integration
We choose the protocols, tokenisation approach and message flows, and write the interface specification.
- 03
Build and test
We build the payment, settlement and POS flows with automated tests, including declines, timeouts and refunds.
- 04
Certify with the provider
We run the provider’s test cases in its test environment and fix what its certification finds.
- 05
Pilot, then roll out
We go live in a few stores or channels first, compare totals daily, and then roll out store by store.
- 06
Monitor and support
We watch approval rates, settlement and store postings, and handle provider changes as they are announced.
How it connects
Scroll sideways to see the whole drawing.
Card payments: authorised at the till, settled later, reconciled in the ERP
The terminal or checkout asks the gateway, the gateway asks the acquirer, and the acquirer routes to the card scheme and issuer. Settlement files arrive later and are matched to sales and fees in the ERP. A timeout triggers a reversal so the customer is never charged twice.
- Primary flow
- Asynchronous
- Exception path
The flow, step by step
- From EMV terminal or online checkout to Payment gateway: Authorisation request, over EMV · REST/JSON (primary flow).
- From Payment gateway to Acquirer: Authorisation, over ISO 8583 (primary flow).
- From Acquirer to Card scheme and issuer: Routed to the issuer, over ISO 8583 (primary flow).
- From Acquirer to Payment gateway: Approved or declined, over ISO 8583 (asynchronous).
- From Acquirer to Integration layer: Settlement and fee files, over SFTP (asynchronous).
- From Integration layer to ERP: Settled sales, fees and payouts, over REST/JSON (primary flow).
- From Payment gateway to EMV terminal or online checkout: No response in time: automatic reversal, over ISO 8583 0400 (exception path).
- From Integration layer to Payments operations team: Settlement mismatch or chargeback (exception path).
Scroll sideways to see the whole drawing.
POS to ERP: every sale posted once
Sales flow from the tills to the ERP as events, and prices and stock flow back. A store that goes offline keeps selling and catches up. A posting that fails is retried, then handed to a person.
- Primary flow
- Asynchronous
- Exception path
The flow, step by step
- From POS terminals to Store or POS cloud server: Sales, returns and voids (primary flow).
- From Store or POS cloud server to Integration layer: Sales events and end-of-day totals, through an event queue, over REST/JSON (asynchronous).
- From Integration layer to ERP: Sales and stock movements posted, over OData · REST/JSON (primary flow).
- From ERP to Integration layer: Prices, promotions and item data, by API or file export, over REST/JSON (primary flow).
- From Integration layer to Store or POS cloud server: Price and stock updates, over REST/JSON (primary flow).
- From Integration layer to Retry queue: Posting failed (exception path).
- From Retry queue to Integration layer: Retried (exception path).
- From Retry queue to Store operations team: Still failing: alert with the details (exception path).
Technologies
- Languages
- Java
- Kotlin
- Data and analytics
- Apache Kafka
- ERP systems
- SAP S/4HANA
- Oracle NetSuite
- Microsoft Dynamics 365 Business Central
- Odoo
- Banking standards and channels
- SFTP (H2H)
- Payments
- ISO 8583
- EMV
- EMV 3-D Secure
- PCI DSS
- Integration
- REST
- Webhooks
- RabbitMQ
Ways to work with us
- Project-based deliveryXSIS delivers an agreed scope against written acceptance criteria, with a named delivery lead.
- Dedicated teamA complete team that works only on your product, run day to day by XSIS and directed by you.
- Staff augmentationEngineers and specialists who join your team, work in your tools and report to your managers.
Questions and answers
Do you work with ISO 8583 directly?
Yes, where the acquirer or processor offers it. ISO 8583 is a framework rather than one format: each acquirer publishes its own specification of fields, message types and network management. We build from that specification, handle authorisations, reversals and advice messages, and test every response code. Where a gateway offers a modern API in front of the acquirer, we often recommend that instead.
Link to this questionHow do you keep us out of PCI DSS scope?
We cannot remove PCI DSS, but we can reduce how much of your estate it applies to. We use hosted payment pages, point-to-point encryption at the terminal and tokens from the gateway, so card numbers never reach your POS, ERP or data warehouse. We document the data flows so your assessor can see which systems handle card data and which do not.
Link to this questionWhich payment terminals can you integrate?
We integrate EMV chip and contactless terminals through the protocol their provider supplies, usually a local or cloud API between the POS and the terminal. The terminal and its payment application are certified by the provider, so we integrate with them rather than change them. We confirm the exact models and protocols with you and the provider at the start.
Link to this questionWhat happens when a store loses its connection?
The store keeps selling. Sales are stored locally on the POS or store server and sent to the ERP when the connection returns, each with a unique identifier so nothing is posted twice. Whether card payments can continue offline depends on your acquirer’s rules and your risk appetite, and we design that with you.
Link to this questionHow long does payment certification take?
It is set largely by the gateway or acquirer: their test windows, the number of test cases and how many rounds it takes. We prepare the test scripts and evidence before the window opens, which shortens the rounds, and we plan the rest of the work around the provider’s calendar. We share that plan once the provider confirms its process.
Link to this questionWhat drives the cost?
The number of providers, terminal types and sales channels, whether the acquirer uses ISO 8583 or an API, the certification steps each provider requires, and the number of stores to roll out. Settlement and reconciliation rules add effort when fees and payouts are complex. We estimate per provider and per flow after the mapping step.
Link to this questionDo you handle refunds and chargebacks?
Yes. Refunds and reversals are part of the payment flows we build. For chargebacks, we import the acquirer’s dispute reports, link each one to the original sale and settlement, and give your team a list to work through with the evidence attached. How each dispute is answered stays your decision.
Link to this questionWho owns the code and the work you produce?
Intellectual property in the work we build for you is yours from the first commit — no assignment step at the end. That covers the custom code, documentation and other deliverables made for you. Anything we bring that existed before, such as internal tools or libraries, stays ours, and you receive a licence to use it in your systems. Open-source components keep their own licences, and we list them for you.
Link to this questionTell us what you need to build or connect.
Describe the systems, the timeline and the constraints. The right engineers take it from there.
- Our team will call you within 24 hours during your preferred time slot
- Our team is available 24/7