Overview
Hosted Fields renders a PayPal-hosted iframe on your checkout page, so your integration can qualify for the simplest level of PCI compliance.
To be eligible for the easiest level of PCI compliance - SAQ A - certain payment fields on the checkout page must be hosted securely. This requires you to host the information on an external payment gateway's domain and present the fields to your users in a frame or with a redirect.
Our Hosted Fields solution accomplishes this by rendering an iframe to handle input of the following payment fields on your checkout page:
- Card number
- CVV
- Expiration date
- Postal code
You can customize the look and feel of your web page while meeting PCI requirements.
Demo
Here's an example of a configured Hosted Fields integration. Hosted Fields is built for merchants who want SAQ A eligibility and control over the styling and layout of their page.
See more examples of Hosted Fields integrations.
Browser support
Learn more about browser support for v4 of our JavaScript SDK.
Notice of Collection
PayPal is a data controller and Business for the provision of the payment processing services. In order to satisfy PayPal’s transparency obligations to be known to buyers, you must include the below languages in your own privacy notice, which must be presented to the buyers at or before the point of collection:
We use PayPal for payments and other services. If you wish to use one of these services and pay on our website, PayPal may collect the personal data you provide, such as payment and other identifying information. PayPal uses this information to operate and improve the services it provides to us and others, including for fraud detection, harm and loss prevention, authentication, analytics related to the performance of its services, and to comply with applicable legal requirements. The processing of this information will be subject to PayPal’s privacy policy at https://www.paypal.com/us/legalhub/privacy-full.
Next Page: Setup and Integration →