We have a SaaS application that provides various communications services for our customers. We collect payment from our customers by making a charge against their credit card once per month. We are using the Payments API to do this.
Currently, we hold our customers’ credit card information in our database (encrypted, of course).
We would like to change this so that we do not collect or store the customers’ credit card information. We would prefer to store the credit card information in QuickBooks.
The ‘CardOnFile’ approach is close, but it requires us to collect the customer’s card information in order to create a CardOnFile object. We would like to avoid handling any credit card information at all.
Ideally, here is what we are looking for:
1. A customer signs up with our service.
2. We make a call to QuickBooks API to say “We have a customer who wants to store their credit card information. Please present them with a user interface so they can enter the information. Once you have collected and stored the information, send us an ID for this credit card”.
3. At the end of each month, we make a call to the QuickBooks API that says “Please charge this amount to the credit card that has this ID”. The amount can be different month to month.
Is there any way to use the API to implement step 2 above?
