Supported
Processed
Detectors
Integrated
Gateway
Cybersource, a Visa-backed enterprise gateway, an industry-aware payments layer
Cybersource is one of the largest enterprise payment gateways in the world, now part of Visa Acceptance Solutions after Visa's 2010 acquisition. It moves card, ACH, and alternative-payment volume across 190+ countries and 170+ currencies, with the Decision Manager fraud platform scoring transactions against the entire Visa network. What it doesn't give you, on its own, is an industry-aware payment experience tuned to the way distributors, manufacturers, healthcare providers, nonprofits, schools, government buyers, professional-services firms, and subscription businesses actually collect money.
That's the layer Clarity Payment Hub supplies. On top of Cybersource's acquiring, gateway, and fraud rails, Payment Hub adds branded industry checkout flows, a self-service customer portal tailored to each vertical, Level 2/3 auto-enrichment for commercial-card programs, ACH, tokenized recurring billing, surcharging, and 25+ ERP connectors, so a distributor on Sage, a clinic on Epicor, a nonprofit on NetSuite, and a school on Oracle all get an experience that matches how their industry buys.
What Cybersource owns, authorization, settlement, Decision Manager fraud, Token Management Service, Flex Microform PCI minimization, global payment-method coverage, stays with Cybersource. What Payment Hub owns, the industry-specific payment pattern, the ERP posting, the customer-facing portal, extends Cybersource into the verticals it doesn't reach natively. Your Cybersource merchant account, Visa Acceptance Solutions rates, and gateway configuration all stay exactly as they are.
How Payment Hub connects Cybersource to your ERP
Clarity Connect, the integration engine under Payment Hub with 15+ years of active development, reads from and writes to your ERP in real time using each platform's supported API layer, and talks to Cybersource over the REST API with Flex Microform for browser-side tokenization.
Inbound from ERP
Customers, contacts, open invoices with line items, account balances, credits, payment history, statements, all in real time.
Outbound to ERP
Applied cash receipts, TMS token references, address updates, and Pay-on-Account allocations, posted the moment a customer authorizes payment.
Cybersource-side processing
Cybersource authorizes, scores in Decision Manager, settles, and funds as usual. Clarity never inserts a spread, skims a basis point, or marks up transaction costs.
No ERP modifications
Clarity Connect uses only documented, supported integration points. No schema changes, no ERP-side custom code, no plugins to maintain across upgrades.
For cloud ERPs (NetSuite, Acumatica, Dynamics 365 BC, SAP S/4HANA Cloud) Clarity Connect talks directly to the ERP's cloud APIs. For on-premise ERPs (Dynamics GP/NAV, Sage 100/300, SAP ECC, Oracle EBS, SYSPRO, Epicor P21/Eclipse/Eagle) we use a lightweight outbound-only secure agent that calls from inside your network, no inbound firewall ports to open.
Industries Cybersource + Payment Hub serves
Cybersource is a global, PCI DSS Level 1 gateway with enterprise-grade fraud, tokenization, and authentication tooling, but on its own it's platform-shaped, not industry-shaped. Paired with Clarity Payment Hub, Cybersource becomes an industry-aware payments platform across the eight verticals Clarity has supported for 20+ years.
B2B Distribution &, Wholesale
Commercial-card-heavy AR, line-item invoices, customer-specific pricing, and Level 2/3 interchange savings on every eligible card.
- Level 2/3 auto-enrichment from ERP line-item data
- Customer portal with open invoices, short pays, credits
- ACH + card side-by-side on the same invoice
- Real-time cash application to the ERP
Manufacturing
Progress billing, milestone invoicing, deposits on long build cycles, and commercial-card programs from industrial buyers.
- Deposits and milestone payments tied to sales orders
- Tokenized recurring for service and maintenance contracts
- Level 2/3 on dealer and distributor commercial cards
- Real-time posting so production doesn't wait on AR
Healthcare &, Life Sciences
Patient pay, payment plans, HSA/FSA card acceptance, and practice-management posting without PHI leaking into payment flows.
- Branded patient portal with balance and plan visibility
- Tokenized recurring for payment plans
- HSA/FSA and commercial card acceptance
- Posting to the practice-management or ERP system
Nonprofit &, Fundraising
Donation pages, recurring giving, pledges, tributes, and event registration, all posting to the fund-accounting GL.
- Branded donation and giving pages
- Recurring donations with tokenized card-on-file
- Designation and campaign tracking to the GL
- Lower fees via ACH for larger recurring gifts
Education
Tuition, fees, lunch accounts, enrollment, and continuing-ed registration, consolidated under one payment layer.
- Tuition payment plans with tokenized recurring
- Branded parent / student portal
- ACH for larger tuition payments to reduce fees
- Posting to SIS / ERP for real-time balance updates
Government &, Public Sector
Permit, license, utility, and citation payments with CEDP-ready Level 3 and clean audit trails back to the financial system.
- CEDP-ready Level 3 on every commercial-card transaction
- Branded citizen payment portals
- Fee-pass-through and convenience-fee configurations
- Posting to Tyler, Oracle, SAP, or Dynamics financials
Professional Services &, Agencies
Retainers, project billing, trust/IOLTA segregation, and hourly invoices, paid the same day they're sent.
- Pay-by-link and branded invoice payment pages
- Trust / IOLTA account segregation for legal workflows
- Tokenized recurring for retainers and monthly services
- Real-time posting to the PSA / ERP
Subscription, SaaS &, Membership
Recurring billing, dunning, proration, and card-updater, posted in real time to the subscription or ERP system of record.
- Tokenized recurring with Cybersource Account Updater
- Dunning, retry, and failed-payment recovery flows
- Branded member / subscriber portal
- Real-time posting to the billing / ERP system
We can typically go live in 48 hours once ERP sandbox credentials and Cybersource API keys are shared. Skip the reading and book a 30-minute walkthrough of your industry's exact flow.
The Missing LinkBetween Paymentsand Your ERP
Clarity Payment Hub closes that gap, connecting your orders, invoices, and payment channels into one flow.
Speak to a Platform ArchitectEvery payment method your customers need
Cybersource's enterprise gateway carries one of the broadest payment-method footprints in the industry. Payment Hub surfaces the methods that actually matter in B2B and industry-specific AR, and lets you hide the ones that do not.
Cards
Visa, Mastercard, American Express, Discover, Diners, JCB, and UnionPay, including commercial, corporate, purchasing, and fleet cards that qualify for Level 2/3 rates.
ACH &, eCheck
U.S. bank-account transfers at the lowest per-transaction cost available for large B2B tickets. Tokenized in Cybersource TMS once, re-used in one click forever.
Global &, Cross-Border
Via Cybersource's Visa-backed network: 190+ countries, 170+ currencies, local acquiring in dozens of markets, for cross-border and multinational AR flows without a second gateway contract.
Digital Wallets &, Click to Pay
Apple Pay, Google Pay, Samsung Pay, and Click to Pay (Visa-powered EMV SRC) surface natively in the Cybersource Unified Checkout. Payment Hub's own tokenized wallet remains the primary flow for repeat B2B buyers.
For large B2B accounts, we commonly set ACH as the default payment method above a configurable dollar threshold, protecting your card-processing economics on seven-figure invoices while still giving customers a one-click experience.
Interchange savings and compliant surcharging
Two of the biggest unit-economics levers in B2B payments, Level 2/3 enhanced data and credit-card surcharging, ship in Payment Hub out of the box on top of Cybersource.
Level 2 and Level 3 processing
Level 2 and Level 3 refer to enhanced transaction data (sales tax, customer code, invoice line items, purchase order number, freight, duty, product codes) that the card networks require to qualify large B2B transactions for the lowest interchange tiers. Without this data, B2B card transactions default to the most expensive commercial-card interchange.
Cybersource supports Level 2/3 data passing on qualified Visa and Mastercard commercial cards, plus CEDP (Customer-Defined Enhanced Data Program) for U.S. federal and state government purchasing. Clarity Payment Hub pulls the line-item, tax, and customer-code data from your ERP automatically and passes it to Cybersource on every eligible transaction. There is nothing for your AR team to key in and nothing for the customer to fill out.
Compliant credit card surcharging
Payment Hub supports compliant credit card surcharging out of the box on Cybersource. The platform handles state-by-state rule enforcement, displays the legally required pre-authorization disclosure, caps the surcharge percentage at the allowed maximum (typically 3% per card network rules), and tracks the surcharge as a separate line in your ERP. Debit cards, prepaid cards, and non-surcharge-eligible cards are excluded automatically.
Cash-discount programs, where the invoice price already includes processing and non-card methods get a discount, are also supported. Your choice between the two models depends on your state, your customers' expectations, and your pricing strategy.
Decision Manager, TMS, and enterprise fraud tooling
Cybersource's enterprise-grade fraud and tokenization services are what set it apart from lighter-weight gateways. Clarity Payment Hub surfaces all of it, inside the industry-aware flow your AR and analyst teams actually work in.
Decision Manager fraud scoring
AI/ML fraud engine with 260+ detectors, scored against the full Visa network's global intelligence. Payment Hub exposes the score in AR: high-risk holds, medium-risk step-up to 3DS, low-risk straight through.
Token Management Service (TMS)
PCI-scoped vault holds every card and bank account as a token. Network tokenization and Account Updater keep cards current automatically, expired and reissued cards refresh without customer action.
Payer Authentication (3DS 2.x)
EMV 3-D Secure 2 for liability shift on card-not-present transactions. Payment Hub triggers step-up challenges only when Decision Manager flags medium-risk, keeping friction off low-risk repeat buyers.
Flex Microform tokenization
Card data tokenizes directly in the customer's browser and never hits Payment Hub or your infrastructure, pushing PCI scope to SAQ A, the lightest self-assessment available.
Your fraud analysts keep working in the Cybersource case-management console they already know, reviewing flagged orders, tuning rules, running network insights. Payment Hub simply wires Decision Manager's output into the industry-aware checkout so AR sees the risk decision in real time, not after the fact.
Security, PCI scope, and enterprise compliance
Cybersource is PCI DSS Level 1 certified, the highest tier, and backed by Visa's own compliance and security infrastructure. Clarity Payment Hub is built to push your deployment to the lightest compliance scope available.
- Tokenization at Cybersource. Every card and ACH account is tokenized directly at Cybersource's PCI-certified Token Management Service. Raw card numbers never touch Payment Hub's infrastructure and never touch your servers.
- Flex Microform. Card data is captured and tokenized inside the customer's browser using Cybersource's Flex Microform, so PAN never transits Payment Hub or your servers. Combined with TMS, this qualifies most deployments for SAQ A, the lightest PCI self-assessment available.
- SOC 2 Type II. Clarity Ventures operates to SOC 2 Type II standards. Security, availability, confidentiality, and data-handling controls are independently audited on an ongoing basis.
- Decision Manager + 3DS 2.x fraud controls. Cybersource-level Decision Manager scoring, AVS, CVV, velocity checks, and EMV 3-D Secure combine with portal-level controls (invoice-bound authentication, customer-matched billing addresses, single-use signed Quick Pay links) for a defense profile tuned to B2B invoice fraud, not consumer card fraud.
- Outbound-only agent for on-premise ERPs. No inbound firewall ports. No VPN tunnel. No public ERP exposure.
Cybersource + Payment Hub FAQ
The questions B2B AR, IT, and finance teams ask before rolling out Cybersource through Clarity Payment Hub.
Which industries does Cybersource + Clarity Payment Hub serve?
Eight verticals out of the box: B2B distribution and wholesale, manufacturing, healthcare and life sciences, nonprofit and fundraising, education, government and public sector, professional services and agencies, and subscription / SaaS / membership.
Each vertical gets an industry-aware payment pattern on top of Cybersource's Visa-backed gateway, branded portals, real-time ERP posting, Level 2/3 data enrichment, ACH, tokenized recurring, Decision Manager fraud scoring. The same 48-hour rollout and 25+ ERP connector library covers every vertical, so a distributor on Sage, a clinic on Epicor, a nonprofit on NetSuite, and a municipality on Oracle all get an experience that matches how their industry buys.
Does Cybersource support ACH and eCheck transactions?
Yes. Cybersource supports U.S. ACH (eCheck) processing alongside card payments. Clarity Payment Hub exposes ACH as a first-class payment method in the portal and the tokenized wallet, which is typically the lowest-cost method for high-dollar B2B invoices.
Bank details are stored as tokens inside Cybersource's Token Management Service so customers re-use them in one click without re-entering routing and account numbers. Many customers set ACH as the default on invoices over a defined dollar threshold to protect card-processing economics on large tickets.
What is Cybersource Decision Manager and how does Payment Hub use it?
Decision Manager is Cybersource's enterprise-grade fraud management platform, an AI/ML-driven engine that scores every transaction against the Visa network's global intelligence, 260+ detectors, device fingerprinting, velocity rules, and your own custom rule set. It is one of the reasons large merchants stay on Cybersource year after year.
Clarity Payment Hub exposes Decision Manager's risk score and decisioning inside the AR workflow: high-risk orders are held for review, medium-risk require 3D Secure step-up authentication, and low-risk clear straight through. Your fraud analyst team keeps the same Cybersource case-management console they know, Payment Hub simply makes the decisioning visible to AR in real time.
How does Cybersource Token Management Service work with Payment Hub?
Token Management Service (TMS) is Cybersource's PCI-scoped vault that replaces raw card numbers with tokens and keeps them current through the Account Updater service, so expired, reissued, and lost/stolen cards on file refresh automatically without customer intervention. For industries with long, recurring customer relationships (subscriptions, utilities, memberships, payment plans), this is where a meaningful percentage of "failed" transactions actually gets recovered.
Clarity Payment Hub uses TMS as the system of record for every saved card and ACH account, then references the token in the ERP. Raw PAN never touches Payment Hub or your infrastructure, and card-on-file accuracy stays high across multi-year B2B relationships.
Can Cybersource pass Level 2 and Level 3 data for interchange savings?
Yes. Cybersource supports Level 2 and Level 3 enhanced data on qualified Visa and Mastercard commercial-card transactions, plus CEDP (Customer-Defined Enhanced Data Program) for U.S. government purchasing. Clarity Payment Hub pulls the line-item, tax, and customer-code data from your ERP automatically and passes it to Cybersource on every eligible transaction.
B2B merchants commonly save 0.5–1.0% (up to 30% off transaction fees) of each eligible card transaction when Level 2/3 data is passed correctly. On a $50,000 invoice that is $250–$500 of margin preserved, on every transaction.
How does Clarity Payment Hub handle Cybersource batch settlements?
Cybersource authorizes and settles transactions on its own rails and funds on its own schedule. What Clarity Payment Hub changes is the ERP side: the applied cash receipt is written back to your ERP in real time the moment the customer pays.
There is no overnight batch, no CSV import, and no manual cash application. Invoice status, account balance, and aging reports update immediately in your ERP, which is how the DSO drop and the AR-time savings become real.
What is the integration cost and timeline for Cybersource through Payment Hub?
Clarity Payment Hub is packaged software, not a custom build. A typical Cybersource + ERP go-live takes 48 hours once Clarity receives ERP sandbox credentials and Cybersource API keys. No new servers, no middleware, no custom code on your ERP.
You keep your Cybersource merchant account and your negotiated Visa Acceptance Solutions rates, Clarity does not insert a transaction markup or skim basis points. Implementation is a flat subscription with the ERP integration included.
Is Cybersource PCI compliant and how does Flex Microform affect our own PCI scope?
Cybersource is PCI DSS Level 1 certified, the highest tier, and backed by Visa's own compliance infrastructure. Clarity Payment Hub uses Cybersource Flex Microform to tokenize card data directly in the customer's browser, so raw PAN never reaches your servers, Payment Hub's servers, or the network in between.
Most deployments qualify for SAQ A, the lightest PCI self-assessment available. That means a dramatically shorter annual compliance review, no cardholder-data environment to audit, and significantly lower risk of breach exposure.
Does Cybersource support surcharging and recurring billing?
Yes to both. Cybersource supports compliant credit card surcharging. Clarity Payment Hub enforces state-by-state rules, network caps, and the legally required pre-authorization disclosure. Debit, prepaid, and non-eligible cards are excluded automatically.
Cybersource also supports tokenized recurring billing, scheduled payments, and installment plans, with retry logic and the Account Updater service built into TMS refreshing expired and reissued cards without customer action. Saved-card and saved-ACH tokens live in Cybersource's PCI vault, not on your infrastructure.
How does Cybersource + Payment Hub compare to an ERP-native payment module?
ERP-native payment modules typically force you onto one processor at rates you cannot negotiate, and rarely provide a true customer-facing portal or enterprise-grade fraud scoring. Cybersource + Payment Hub keeps you on Cybersource's Visa-backed gateway (or lets you switch without rebuilding the portal), adds a branded self-service buyer experience, passes Level 2/3 data automatically to unlock the lowest B2B interchange tiers, and runs Decision Manager risk decisions through the AR workflow.
ERP-native modules solve for the ERP. Cybersource + Payment Hub solves for the customer experience, fraud loss, and unit economics, which is where AR modernization actually pays back.
Can we move to Cybersource if we are currently on another gateway?
Yes, and Clarity Payment Hub is designed to make that transition painless. Because Payment Hub is gateway-agnostic, you can port your portal, your ERP integration, your customer accounts, and your buyer UX from your current gateway to Cybersource without rebuilding any of them. The only piece that changes is the processor credential. Saved tokens are re-vaulted into Cybersource TMS during migration, and the Account Updater service begins refreshing cards on the first billing cycle.