4 ms·

This is interesting, but one thing I didn't understand from the video demo (which shows a background check form and a payment form) Aren't these SaaS tools lik

This is interesting, but one thing I didn't understand from the video demo (which shows a background check form and a payment form) Aren't these SaaS tools like Stripe (payments) and Checkr (background checks) already built in a way that allows you to never have sensitive PII like payment info or SSN touch your servers?

mahmoudimus 7y ago
Great question. Those are examples we built that we thought would be easily relatable to show what's possible with this integration. Some services will give you the ability to handle PII or PCI (payments) data, but not all services make it so easy on their customers. Also worth noting is that this Netlify integration allows you to collect sensitive info one time and then send it to as many vendors as you might need/want. So, for example, if you get different levels of data from various background check providers, you could collect SSN, driver's license, other PII, etc. and run it through any number of vendors. You also retain optionality and the ability to send your data wherever you want in the future. (disclaimer: I work for VGS)
ledgerdev 7y ago
Yes they are, BUT if you use stripe(or any processor) for monthly recurring charges or tokenization, the card data is permanently locked to processor. So what happens next year when you decide you need to use a different processor for some reason? Well you're out of luck and will have to force all of your customers to re-enter payment data to change processors.
- KeithBrink 7y ago
  Stripe supports migrating your customer data to another processor: https://stripe.com/docs/security/data-migrations/exports https://stripe.com/docs/security/data-migrations/exports And it looks like they also support importing data from other providers: https://stripe.com/docs/recipes/switching-to-stripe#migration https://stripe.com/docs/recipes/switching-to-stripe#migratio...
  - ledgerdev 7y ago
    That is good and some gateways do this as well but many don't and, having the tokens under your control means you don't have to co-ordinate a transfer between 2 other parties, but just proxy a new outbound request to your new provider and be done with it.

mahmoudimus 7y ago

Great question. Those are examples we built that we thought would be easily relatable to show what's possible with this integration. Some services will give you the ability to handle PII or PCI (payments) data, but not all services make it so easy on their customers. Also worth noting is that this Netlify integration allows you to collect sensitive info one time and then send it to as many vendors as you might need/want. So, for example, if you get different levels of data from various background check providers, you could collect SSN, driver's license, other PII, etc. and run it through any number of vendors. You also retain optionality and the ability to send your data wherever you want in the future. (disclaimer: I work for VGS)

ledgerdev 7y ago

Yes they are, BUT if you use stripe(or any processor) for monthly recurring charges or tokenization, the card data is permanently locked to processor. So what happens next year when you decide you need to use a different processor for some reason? Well you're out of luck and will have to force all of your customers to re-enter payment data to change processors.

KeithBrink 7y ago
Stripe supports migrating your customer data to another processor: https://stripe.com/docs/security/data-migrations/exports https://stripe.com/docs/security/data-migrations/exports And it looks like they also support importing data from other providers: https://stripe.com/docs/recipes/switching-to-stripe#migration https://stripe.com/docs/recipes/switching-to-stripe#migratio...
- ledgerdev 7y ago
  That is good and some gateways do this as well but many don't and, having the tokens under your control means you don't have to co-ordinate a transfer between 2 other parties, but just proxy a new outbound request to your new provider and be done with it.