Subphonic Transact
Flexible, secure payments without the complexity.
Take secure payments by link, phone, keypad or voice, with or without staff assistance. Card data never touches your people, your phone system or your recordings.
Secure by design
PCI compliance made simple
Any organisation that takes card payments must comply with PCI DSS by ensuring that sensitive customer card data is not exposed to employees, recorded or transcribed. In practice, most contact centres rely on workarounds.
Pause-and-resume recording
Stopping the recorder while a card number is read out does not satisfy compliance obligations, and leaves gaps in the call record.
Clean rooms
Physically isolated payment areas are costly to build, take years to audit, and are hard to justify for hybrid teams.
Staff going silent
Agents mute themselves or leave the call at the exact moment the customer most needs help.
Patchwork tooling
Separate tools for phone menus, chat and SMS leave channels unevenly covered and multiply the compliance reviews.
Transact keeps card data out of your systems entirely. No pauses, no clean rooms, no silence on the line.
Built on modern infrastructure, it is designed for straightforward set-up and is updated as PCI DSS requirements evolve. Customisable to your brand, workflows and customer preferences, Transact adapts to how your organisation operates.
How it works
Card data never touches your people, your phone system or your recordings
Whatever the channel, the customer's card digits go to Transact, and only Transact. Your agents, systems and recordings see masked digits. Your Payment Service Provider receives the card data and returns the result.
Payment channels
Your scope
Simplified self-assessment
With no card data in your environment, your PCI DSS burden is reduced from a full audit to a simplified Self-Assessment Questionnaire.
Your coverage
Highest level PCI DSS coverage
Transact is an independently audited PCI DSS Level 1 service provider with a current Attestation of Compliance. We carry the 300+ controls, so your team only completes light-touch vendor due diligence.
How Transact delivers
More payments, less friction
Transact is built for the way modern contact centres actually work. It is quick to set up, cost-effective to run, and designed to make payments as straightforward as possible for customers while reducing staff overheads.
Quick
From contract to live in days
No long consultancy build, no bespoke integrations, no infrastructure to set up before go-live.
Low cost
No set-up fee
Transact is licensed per user, per month. Connection, infrastructure and support are all included. Turn it on to start taking payments.
Flexible
However they prefer to pay
Customers pay by keypad, voice or link, supported live by an employee or unassisted through a range of options.
Automated
Less handling per payment
Employees complete on-call payments in a single click, never hearing or entering card data. Self-service options remove staff from the transaction entirely.
Payment methods
Payment methods built around every customer
Transact offers multiple routes to payment to suit your workflows, your customers' preferences and any access needs. Pay by Phone provides hands-on support without technical complexity, Pay by Link introduces flexibility and choice, and unassisted options maximise customer convenience.
Phone · Contact centre · Teams
Pay by Phone
Your team stays on the call while the customer enters card details by keypad or voice. Every digit is masked in real time, so staff never hear them and nothing is recorded.
- Staff support customers throughout
- Card digits never seen or heard
- Single click payment processing
Email · SMS · Webchat
Pay by Link
A secure, branded payment link sent to the customer to pay on their own device, during the call or afterwards. Card data goes straight to the payment page, not through the contact centre.
- Pay any time, on any device
- Compliant payments from day one
- Send by email, SMS or web link
IVR · Agentic AI · Webchat · SMS · Letter
Unassisted payments
Take card details straight from the customer on whichever path they are already on: an automated phone menu, a voice bot, website chat, SMS, an emailed link or a reference in a letter.
- Available 24/7
- Reduces staff overheads
- Hands over to your team if needed
Configure · Customise · Connect
Set up in three steps
No phone-system integration, no rebuild. Subphonic configures Transact around the payment provider, brand and tools you already have.
01 / Configure
Bring your own PSP
If you already have a Payment Service Provider (PSP) in place, Subphonic configures your Transact account and you can start taking payments straight away.
- No phone-system integration required
- Encrypted link to our cloud
- Resilient, multi-region hosting
02 / Customise
Built to your brand
Subphonic configures Transact to match your organisation: colours, logo, language packs and the fields your agents need to capture.
- Card networks and PSPs (Worldpay, PayPal and more)
- Fields captured: full card number, security code, address
- Language and organisation-specific wording packs
03 / Connect
One platform. Three ways in.
Employees access Transact in whatever way suits their workflow: app, browser or inside your CRM. Calls are matched to transactions automatically.
- CRM embed: Dynamics, HubSpot, Salesforce, Zendesk and more
- Browser via a favourite link
- Standalone desktop app
Platform
Engineered for resilience
Transact deploys quickly and adapts to your environment because it was built with flexibility in mind: cloud-native by design, not a legacy system retrofitted with payment and security layers. It runs across multiple public clouds, with the resilience and reach to be hosted wherever your business operates.
Card data only ever touches a small, isolated set of services. It is encrypted in use and automatically erased once processing completes. Because that payment layer is isolated from the rest of the platform, meeting a new PCI DSS requirement does not mean re-certifying or rebuilding the system around it.
Inputs
Transact
Transact
Intelligence layer
PSP
Your Payment Service Provider
Captured card data is decrypted and processed with your PSP. The response is sent back to your organisation. No card data is returned with it.
Modular by design
Each capability above runs as its own isolated service, so a change to one (a new region, a new PSP, a new compliance requirement) does not touch the rest.
Resilience
Dual gateways
No single point of failure per region.
Latency
~3ms
Added by routing the call through Transact.
Card data
In-memory only
Encrypted in use, wiped automatically.
Pairs with Focus
Record every call in its entirety
Subphonic Focus records every call for compliance, coaching and quality, while Transact handles the payment in the background. Because card data never enters the recording, there is no gap, no redaction needed, and no compromise on either product's compliance stance.
Trust Centre
Assurance at every layer
Transact's security does not stop at the product. The same rigour runs through everything Subphonic does: our processes, our culture and our governance, audited against recognised global standards.
Payment data
PCI DSS 4.0.1
Independently validated controls for handling cardholder data. Transact is an audited Level 1 service provider with a current Attestation of Compliance.
Information security
ISO 27001:2022
Independently audited information security management. The baseline everything else is built on.
AI management
ISO 42001:2023
Responsible, ethical use of artificial intelligence, with ongoing governance of how our AI is built and deployed.
Business continuity
ISO 22301:2019
Resilience and continuity of operations through disruption.
Cloud security
CSA STAR Level 1
Public attestation of our cloud security, compliance and data-protection practices across our Azure environment.
Baseline cyber hygiene
Cyber Essentials
UK government-backed scheme covering the technical controls that block the most common cyber attacks.
Ready to talk?
Transact keeps people in the conversation and card data out of your environment, helping your business meet PCI DSS without pauses, mutes or extensive system rebuilds. Book a demonstration to see it for yourself.