Skip to content
XSIS
Talk to an engineer

Integrations

Payments and POS integration

Card payments and POS connected end to end, from terminal to ledger

ISO 8583 and gateway integrations, EMV terminals, acquirer settlement files, and POS to ERP sales and stock sync.

Overview

A card payment touches several systems in a few seconds: the terminal or checkout, a payment gateway, the acquirer, the card scheme and the issuer. A day later the money and the fees arrive in settlement files that someone has to match to the sales in your ERP. A store sale changes stock, prices and the ledger too. When these systems disagree, finance chases differences by hand.

We integrate EMV terminals and online checkouts with payment gateways and acquirers, using ISO 8583 where the acquirer speaks it and the gateway’s API where it does not. We process settlement and fee files, and connect POS systems to your ERP so sales, returns, stock and prices stay in step across every store.

We design to keep card data out of your systems wherever possible, using tokenisation and hosted payment pages, which reduces the part of your estate that PCI DSS applies to. Every flow is tested with the provider’s test environment, piloted in a small number of stores and monitored once it runs.

What we deliver

  1. Payments and POS landscape

    Every terminal type, checkout, gateway, acquirer and POS system in scope, with the formats and settlement cycle of each.

  2. Gateway and acquirer integration

    Authorisation, capture, refund and reversal flows, over ISO 8583 or the provider’s API, with each response code handled.

  3. Terminal integration

    EMV chip and contactless terminals connected to your POS or kiosk software, with the provider’s terminal protocol.

  4. Tokenisation and PCI DSS scope

    A design that replaces card numbers with tokens, and a written view of which systems remain in PCI DSS scope.

  5. Settlement file processing

    Acquirer settlement and fee files collected, validated and turned into postings your ERP can match.

  6. POS to ERP sync

    Sales, returns, voids and end-of-day totals posted from every store to the ERP, once and only once.

  7. Prices, promotions and items

    Item data, prices and promotions sent from the ERP to the POS, so every till sells at the right price.

  8. Payments reconciliation

    Matching of sales, authorisations, settlements and payouts, with differences listed for your team to clear.

  9. Test and certification support

    Test scripts and evidence for the gateway’s or acquirer’s certification, and support through each round of it.

  10. Monitoring and alerts

    Alerts for declined-rate changes, missing settlement files, stores that stop posting and terminals that go quiet.

How we work

  1. 01

    Map the payment and store flows

    We follow a sale from the till to the ledger with your finance, store and IT teams, and agree the scope.

  2. 02

    Design the integration

    We choose the protocols, tokenisation approach and message flows, and write the interface specification.

  3. 03

    Build and test

    We build the payment, settlement and POS flows with automated tests, including declines, timeouts and refunds.

  4. 04

    Certify with the provider

    We run the provider’s test cases in its test environment and fix what its certification finds.

  5. 05

    Pilot, then roll out

    We go live in a few stores or channels first, compare totals daily, and then roll out store by store.

  6. 06

    Monitor and support

    We watch approval rates, settlement and store postings, and handle provider changes as they are announced.

How it connects

Card payments: authorised at the till, settled later, reconciled in the ERPThe terminal or checkout asks the gateway, the gateway asks the acquirer, and the acquirer routes to the card scheme and issuer. Settlement files arrive later and are matched to sales and fees in the ERP. A timeout triggers a reversal so the customer is never charged twice.POSEMV terminal oronline checkoutChip, contactless ande-commerceGatewayPayment gatewayTokenisation androutingBankAcquirerAuthorisation andsettlementThird partyCard scheme andissuerApproves or declinesERPERPSales, fees andpayoutsXSISIntegration layerSettlement parsingand matchingPeoplePaymentsoperations teamMismatches, disputesand chargebacks1EMV · REST/JSON2ISO 85833ISO 85834ISO 85835SFTP6REST/JSON7ISO 8583 04008

Card payments: authorised at the till, settled later, reconciled in the ERP

The terminal or checkout asks the gateway, the gateway asks the acquirer, and the acquirer routes to the card scheme and issuer. Settlement files arrive later and are matched to sales and fees in the ERP. A timeout triggers a reversal so the customer is never charged twice.

  • Primary flow
  • Asynchronous
  • Exception path

The flow, step by step

  1. From EMV terminal or online checkout to Payment gateway: Authorisation request, over EMV · REST/JSON (primary flow).
  2. From Payment gateway to Acquirer: Authorisation, over ISO 8583 (primary flow).
  3. From Acquirer to Card scheme and issuer: Routed to the issuer, over ISO 8583 (primary flow).
  4. From Acquirer to Payment gateway: Approved or declined, over ISO 8583 (asynchronous).
  5. From Acquirer to Integration layer: Settlement and fee files, over SFTP (asynchronous).
  6. From Integration layer to ERP: Settled sales, fees and payouts, over REST/JSON (primary flow).
  7. From Payment gateway to EMV terminal or online checkout: No response in time: automatic reversal, over ISO 8583 0400 (exception path).
  8. From Integration layer to Payments operations team: Settlement mismatch or chargeback (exception path).
POS to ERP: every sale posted onceSales flow from the tills to the ERP as events, and prices and stock flow back. A store that goes offline keeps selling and catches up. A posting that fails is retried, then handed to a person.POSPOS terminalsEvery till in everystoreData storeStore or POS cloudserverKeeps selling whileofflineXSISIntegration layerEvent queue,mapping, duplicateprotectionERPERPSales, inventory andfinanceServiceRetry queueRetries with back-off,then a dead-letterqueuePeopleStore operationsteam12REST/JSON3OData · REST/JSON4REST/JSON5REST/JSON678

POS to ERP: every sale posted once

Sales flow from the tills to the ERP as events, and prices and stock flow back. A store that goes offline keeps selling and catches up. A posting that fails is retried, then handed to a person.

  • Primary flow
  • Asynchronous
  • Exception path

The flow, step by step

  1. From POS terminals to Store or POS cloud server: Sales, returns and voids (primary flow).
  2. From Store or POS cloud server to Integration layer: Sales events and end-of-day totals, through an event queue, over REST/JSON (asynchronous).
  3. From Integration layer to ERP: Sales and stock movements posted, over OData · REST/JSON (primary flow).
  4. From ERP to Integration layer: Prices, promotions and item data, by API or file export, over REST/JSON (primary flow).
  5. From Integration layer to Store or POS cloud server: Price and stock updates, over REST/JSON (primary flow).
  6. From Integration layer to Retry queue: Posting failed (exception path).
  7. From Retry queue to Integration layer: Retried (exception path).
  8. From Retry queue to Store operations team: Still failing: alert with the details (exception path).

Technologies

Languages
  • Java
  • Kotlin
Data and analytics
  • Apache Kafka
ERP systems
  • SAP S/4HANA
  • Oracle NetSuite
  • Microsoft Dynamics 365 Business Central
  • Odoo
Banking standards and channels
  • SFTP (H2H)
Payments
  • ISO 8583
  • EMV
  • EMV 3-D Secure
  • PCI DSS
Integration
  • REST
  • Webhooks
  • RabbitMQ

Ways to work with us

Questions and answers

Do you work with ISO 8583 directly?

Yes, where the acquirer or processor offers it. ISO 8583 is a framework rather than one format: each acquirer publishes its own specification of fields, message types and network management. We build from that specification, handle authorisations, reversals and advice messages, and test every response code. Where a gateway offers a modern API in front of the acquirer, we often recommend that instead.

Link to this question
How do you keep us out of PCI DSS scope?

We cannot remove PCI DSS, but we can reduce how much of your estate it applies to. We use hosted payment pages, point-to-point encryption at the terminal and tokens from the gateway, so card numbers never reach your POS, ERP or data warehouse. We document the data flows so your assessor can see which systems handle card data and which do not.

Link to this question
Which payment terminals can you integrate?

We integrate EMV chip and contactless terminals through the protocol their provider supplies, usually a local or cloud API between the POS and the terminal. The terminal and its payment application are certified by the provider, so we integrate with them rather than change them. We confirm the exact models and protocols with you and the provider at the start.

Link to this question
What happens when a store loses its connection?

The store keeps selling. Sales are stored locally on the POS or store server and sent to the ERP when the connection returns, each with a unique identifier so nothing is posted twice. Whether card payments can continue offline depends on your acquirer’s rules and your risk appetite, and we design that with you.

Link to this question
How long does payment certification take?

It is set largely by the gateway or acquirer: their test windows, the number of test cases and how many rounds it takes. We prepare the test scripts and evidence before the window opens, which shortens the rounds, and we plan the rest of the work around the provider’s calendar. We share that plan once the provider confirms its process.

Link to this question
What drives the cost?

The number of providers, terminal types and sales channels, whether the acquirer uses ISO 8583 or an API, the certification steps each provider requires, and the number of stores to roll out. Settlement and reconciliation rules add effort when fees and payouts are complex. We estimate per provider and per flow after the mapping step.

Link to this question
Do you handle refunds and chargebacks?

Yes. Refunds and reversals are part of the payment flows we build. For chargebacks, we import the acquirer’s dispute reports, link each one to the original sale and settlement, and give your team a list to work through with the evidence attached. How each dispute is answered stays your decision.

Link to this question
Who owns the code and the work you produce?

Intellectual property in the work we build for you is yours from the first commit — no assignment step at the end. That covers the custom code, documentation and other deliverables made for you. Anything we bring that existed before, such as internal tools or libraries, stays ours, and you receive a licence to use it in your systems. Open-source components keep their own licences, and we list them for you.

Link to this question

Tell us what you need to build or connect.

Describe the systems, the timeline and the constraints. The right engineers take it from there.

  • Our team will call you within 24 hours during your preferred time slot
  • Our team is available 24/7