Tokenized Flow
For most merchants. Tokenize card data first, then process payments using tokens. Minimizes your PCI scope.
Raw Card Data Flow
For PCI Level 1 certified merchants only. Process payments with raw card numbers directly. Requires full compliance infrastructure.
Comparison
| Aspect | Tokenized Flow | Raw Card Data Flow |
|---|---|---|
| PCI Requirement | SAQ A or SAQ A-EP | Full PCI DSS Level 1 |
| Best For | Most merchants, startups, mid-market | Enterprise, payment processors, high-volume platforms |
| Integration Steps | 3 steps (get token → tokenize → process) | 2 steps (get token → process) |
| Latency | Slightly higher (extra tokenization call) | Lower (direct processing) |
| Card Data Handling | Never touches your servers | Passes through your servers |
| Compliance Cost | Lower | Significantly higher |
Choose Your Path
Use the Tokenized Flow if...
Use the Tokenized Flow if...
- You are not PCI DSS Level 1 certified
- You want to minimize compliance burden and cost
- You’re building a new payment integration
- You need to store cards for recurring payments (tokens are reusable)
- Your transaction volume doesn’t require sub-millisecond optimization
Use the Raw Card Data Flow if...
Use the Raw Card Data Flow if...
- You are already PCI DSS Level 1 certified
- You have existing infrastructure for handling raw card data
- You’re a payment processor or large enterprise
- Reduced latency is critical for your use case
- You process high volumes and can justify compliance costs
API Endpoints
Each flow uses different endpoints. Reference the table below for your environment.Tokenized Flow Endpoints
The tokenized flow requires three endpoints: one for access tokens, one for tokenization, and one for processing payments.- Sandbox
- Production
| Purpose | Endpoint |
|---|---|
| Get Access Token | POST https://stage.tonder.io/tokenization/auth |
| Tokenize Card Data | POST https://token-sandbox.tonder.io/v1/gateway/inboundRoutes/{route_id}/token |
| Process Payment | POST https://stage.tonder.io/api/v1/process/ |
Your
route_id is provided in your Tonder dashboard after onboarding. Contact support if you don’t have one.Raw Card Data Flow Endpoints
The raw card flow requires two endpoints: one for access tokens and one for direct processing.- Sandbox
- Production
| Purpose | Endpoint |
|---|---|
| Get Access Token | POST https://stage.tonder.io/tokenization/auth |
| Process Payment | POST https://process-sandbox.tonder.io/raw-data |