Get card using card number (PAN)

This is a web service designed to lookup an card based on the card number. The payload in the request is encrypted with JWE (JSON Web Encryption), to enable end-to-end encryption from source system to Enfuce.

PCI DSS compliance

Processing payment information (PAN, expiry, CVC2/CVV2) is controlled with strict compliance regulations by the card schemes. There are multiple ways to access the card payment information in Enfuce's APIs depending on the client solution, and whether the client is a card schema member themselves and therefore responsible for compliance.

The alternative shown here (Get card using card number) relies on that the client is responsible for PCI DSS compliance themselves to the card schema.