Elavon downloads and stores cookies on your device when you visit our website. We use these cookies to better understand and improve your browsing experience by identifying most visited pages, personalising content, and measuring site performance.

Essential cookies enable core functionality such as page navigation and access to secure areas. The website cannot function properly without these cookies; they can only be disabled by changing your browser preferences.

These are cookies that support site functionality that is visible or advantageous to you or your experience of the site, they enable websites to remember choices and provide a more personalized experience.   Functional cookies help to provide services that you request, such as language preference or layout.

Performance cookies help us to improve our website by collecting and reporting information on its usage (for example, which of our pages are most frequently visited).

These cookies and similar technologies gather information about your browsing habits. They remember that you've visited a website and share this information with other organisations, such as advertisers and platforms on which we advertise. They do this in order to provide you with ads that are more relevant to you and your interests. Although these cookies and similar technologies can track your visits to other websites, they don't usually know who you are. Without these cookies, online advertisements you encounter will be less relevant to you and your interests.

Cookie Settings

U.S. Bank Europe DAC. Registered in Ireland – Number 418442..  Registered Office: Block F1, Cherrywood Business Park, Dublin 18, D18 W2X7, Ireland.
U.S. Bank Europe DAC, trading as Elavon Merchant Services, is regulated by the Central Bank of Ireland.
 
U.S. Bank Europe DAC. Registered in Ireland with Companies Registration Office. The liability of the member is limited. United Kingdom branch registered in England and Wales under the number BR022122.
U.S. Bank Europe DAC, trading as Elavon Merchant Services, is a credit institution authorised and regulated by the Central Bank of Ireland.  Authorised by the Prudential Regulation Authority.  Subject to regulation by the Financial Conduct Authority and limited regulation by the Prudential Regulation Authority.  Details about the extent of our regulation by the Prudential Regulation Authority are available from us on request.

Most popular solutions

Additional solutions

Fusebox integration & options

Optional platform features

Documentation

North America

Europe

Regions

:::::notice{important}

**New API Parameters:**
- We will occasionally add new API parameters in Converge’s responses and Export Scripts (webhooks). We urge you to build flexibility into your integrated application so that when a new API parameter is received in the response, it is ignored by your application until you decide to take action on the new parameter.
:::::

## Integration Best Practices 

These integration best practices describe ways to increase data security and reduce the risks of fraudulent activities.

1.  Use HTTP referrers on terminals to only accept transactions from a pre-approved list of websites.
2.  Elavon strongly recommends passing and storing sensitive/confidential merchant data and Converge credentials through server-side code instead of client-side code.
3.  Do not use iFrame with any integration methods or payment options besides Lightbox.
4.  Always submit data to Converge through Hyper Text Transfer Protocol Secure (HTTPS) using the POST method.
5.  Establish an adequate timeout value to prepare for delays or connection issues. Elavon recommends setting the timeout value to 30 – 60 seconds.
6.  Set up a duplicate check rule in the terminal to prevent processing the same transaction more than one time.
7.  Generate an End of Day summary report before settlement to compare and match the data with the POS system.
8.  Use the Auto Pend feature on accounts that automatically settle to be able to review transactions and prevent settling fraudulent transactions.
9.  Elavon recommends creating a user ID (different from the Merchant Admin account) to manage the daily activities such as transaction processing from websites, transaction reviews, and settlements.
10. Converge API requires the passing of a user ID for all transaction requests. This user ID must be different from the user ID for logging in to the Converge user interface. The user ID passed in the transaction request must be associated with the PIN of the terminal that will process the transaction.
11. Set terminal options in the Converge Administrative page instead of the payment page.
12. Set business rules to build constraints that match the merchant’s business needs and to control the manner by which transactions are handled.
13. Set up fraud prevention rules to prevent suspicious and costly fraudulent transactions.
14. Elavon recommends not using custom fields to pass sensitive data like the full card number, expiration date, Track data, and card security code.

## Data Security Compliance 

Elavon requires merchants and integrators that use Converge to support customer compliance with the Payment Card Industry–Data Security Standard (PCI-DSS) guidelines. The PCI-DSS are a set of requirements that enhance the security of payment account data. The core principles and requirements of the PCI-DSS are as follows:

- Build and Maintain Secure Networks
- Protect Cardholder Data
- Maintain a Vulnerability Management Program
- Implement Strong Access Control Measures
- Regular Network Monitoring and Testing
- Maintain Information Security Policies

The Payment Application–Data Security Standard (PA–DSS) provides merchants and integrators with the guidelines to develop secure payment applications that follow the PCI–DSS and don't store sensitive data. The summarized PA–DSS guidelines that payment applications integrating to Converge must comply with are:

1.  Non-retention of full magnetic stripe data, card validation code
    (CAV2, CID, CVV2, CVC2), or PIN block data.
2.  Protection of stored cardholder data.
3.  Availability of secure authentication features.
4.  Logging of payment application activities.
5.  Protection for wireless transmissions.
6.  Facilitation of secure network implementations.
7.  Non-collection and storing of cardholder data on an Internet-connected server.
8.  Facilitation of secure remote network updates.
9.  Facilitation of secure remote access to payment applications.
10. Encryption of sensitive traffic over public networks.
11. Encryption of all non-console administrative access.
12. Maintenance of instructional documentation and training programs for customers, resellers, and integrators.

This table lists the PCI-DSS and PA-DSS resources for Data Security Compliance.

| **Resource**  | **Description**  |
| ----------------------------------------------------------------------------------| ------------------------------------------------ |
| [PCI Security Standards Council](https://www.pcisecuritystandards.org/) | An open global forum for ongoing development, enhancement, storage, dissemination, and implementation of security standards for account data protection.                         |
| [PCI Security Documents Library](https://www.pcisecuritystandards.org/document_library) | A list of documents covering a range of Payments Card Industry topics. If you need more information on PCI security and compliance, you can probably find some information here. |
| [PIN Transaction Security (PTS) Devices](https://www.pcisecuritystandards.org/security_standards/ped/pedapprovallist.html) | List of approved PTS devices. |
| [PCI Software Security Framework](https://docs-prv.pcisecuritystandards.org/Software%20Security/Standard/PCI-Secure-Software-Standard-v1_2_1.pdf) | Complete list of software requirements and guidance for PCI Software Security Framework.  |
| [PA–DSS Program Guide](https://www.pcisecuritystandards.org/pdfs/pci_pa_dss_program_guide.pdf?class=track_link) | PCI’s PA – DSS Program Guide  |

Best Practices and Data Security Compliance

Alliance Offers

Data as a Service

Invitation to Apply

Bank Holidays

Card Activation

Card Controls

Challenge-Widget

Commercial Credit Cards

Commercial Statements

Credit Card Account Details

Credit Card Accounts Overview

Credit Card Alerts

Credit Card Application Status

Credit Card APRs

Credit Card Balance Transfers

Credit Card Disputes

Credit Card Payments

Credit Card Qualified Offers

Credit Card Statements

Credit Card Transactions

Data Sharing for Marketing Purposes

Digital Wallets

Incoming Webhooks

Rewards Accelerator

Rewards Automatic Redemption

Rewards: Balance Summary

Rewards: Dashboard

Rewards Redemption Accounts

Rewards Redemptions

Rewards Transactions: Earned and Redeemed

Travel Notifications

User Profile

3DSecure2

CheckoutJs

Commerce SDK

Converge

Disputes Management

Dynamic Currency Conversion

eBoarding

Elavon Cloud Payments Interface

Elavon Payment Gateway

Fusebox

Hosted Payment Page

In Person Payments on Opayo

Leads

Lightbox payment modal

Online Payments on Opayo

Opayo

Opayo Direct

Opayo Forms

Opayo Reporting API

Opayo Server

Opayo Shared API

Payment Method Gateway

Payments Core 365

Simplify

viaconex

XML API

Card as a Service API

Core Banking API

Money Movement API

Reference API

Access Online Transactions

Account Transfers

Account Validation

ACH Originations

Avvance Connect

Avvance Express

Avvance Flex

Bank Information

Card as a Service

Check Payables

Corporate Account Information

Corporate Account Information 3LO

Corporate Credit Cards

Corporate Onboarding

Corporate Statements

Custody

Data Toolbox

Data Toolbox - Accounts

Data Toolbox - Documents

Data Toolbox - Transactions

Debit Card Phone Number Lookup

Disbursements via Zelle®

U.S. Bank Flexible Capital Platform

Freight Payment Customer Profiles

Freight Payment Transactions

Instant payments

Investment Accounting

PaySmart

Payee Choice

Payee Token+

Personal Loans

Positive Pay

Push to Card

Receivables

RTP® - Real-Time Payments

Tokenized Payments

Treasury Builder

U.S. Bank FBO Account

Virtual Account Reporting

Virtual Card Payments

Voyager Accounts

Voyager Cards

Voyager Drivers

Voyager Transactions

Voyager Vehicles

Wire Transfers

Converge Overview

Getting Started

Transaction Types

Credit Card Transactions Overview

Sale - ccsale

Auth only - ccauthonly

Auth Only Increment - ccauthonly

Verification - ccverify

Balance inquiry - ccbalinquiry

Return - ccreturn

Void - ccvoid

Completion - cccomplete

Delete - ccdelete

Update tip - ccupdatetip

Signature - ccsignature

Add recurring - ccaddrecurring

Update recurring - ccupdaterecurring

Delete recurring - ccdeleterecurring

Submit recurring payment - ccrecurringsale

Add installment - ccaddinstall

Update installment - ccupdateinstall

Delete installment - ccdeleteinstall

Submit installment payment - ccinstallsale

Credit card force - ccforce

Credit Card Credit - cccredit

Merchant Hosted Card On File

Debit Card Transactions

Debit Card Transactions Overview

Purchase - dbpurchase

Return - dbreturn

Auth Only - dbauthonly

Auth only Increment - dbauthonly

Complete - dbcomplete

Reverse - dbreverse

Debit - dbvoid

Delete - dbdelete

Inquiry - dbbainquiry

PINless bill pay - pldbillpay

Pinless debit purchase - pldpurchase

BIN Lookup - binlookup

Straight Send

Cash Tender Transactions

Cash Tender Transactions Overview

Sale - cashsale

Credit - cashcredit

EMV Credit/Debit Card Transactions

EMV card transactions overview

Sale - emvchipsale

Auth Only - emvchipauthonly

Swipe sale - emvswipesale

Swipe auth only - emvswipeauthonly

Card update - emvchipupdatetxn

Reversal - emvreverse

Key exchange - emvkeyexchange

Legacy key exchange - caddbkeyexchange

Interac Refunds

Return - emvchipreturn

EMV DCC check - emvdcccheck

EBT Transactions

EBT transactions overview

Food stamp benefits

Purchase - fspurchase

Return - fsreturn

Inquiry - fsbainquiry

Force purchase - fsforcepurchase

Force return - fsforcereturn

Cash benefits

Purchase - cbpurchase

Inquiry - cbbainquiry

Gift Card Transactions

Gift Card Transactions Overview

Activation - egcactivation

Sale or Redemption - egcsale

Refund - egccardrefund

Replenishment or Reload - egcreload

Balance inquiry - egcbalinquiry