Secure, PCI‑Compliant Payments for
ERP‑Generated Orders
A link-based checkout flow that bridges ERP systems and modern payment infrastructure—without compromising security or usability.
Infinite Electronics
Industry: Retail • Size: 10,000+ employees
The client is a fast-paced distribution company processing more than 700 purchase orders per day. To meet their same-day shipping commitment, orders must be entered and confirmed in their ERP system (Microsoft Dynamics NAV/Business Central) the same day they’re received. Their customer service team works in NICE CXone, which serves as the central hub for customer communication and case tracking.
THE CHALLENGE
Payments inside ERP systems created serious risk
StartFragmentCustomer Service and Accounting teams needed a secure way to collect credit card payments for ERP-generated orders—without exposing sensitive card data to internal users or legacy ERP systems.
Orders were created in Dynamics NAV 2016 and Business Central 14, but there was no modern, customer-friendly checkout experience tied to those orders. Existing processes increased PCI exposure, introduced manual workarounds, and slowed down order release—especially when customers needed a fast and simple way to pay.
The challenge was to design a solution that eliminated risk at every layer, without disrupting ERP workflows or adding operational complexity.EndFragment
Card data being handled inside ERP systems and internal tools
No guarantee only the correct customer could pay for an order
Payment links susceptible to misuse or reuse
No clean integration path with existing Azure infrastructure
Manual processes slowing order release for urgent payments
Legacy Payment Process
BEFORE
ERP System
NAV 2016/BC14
Manual Card Collection
Phone/Email/Internal form
Card Data Enters ERP
Stored or typed by stuff members
Manual Order Release
Delayed, error-prone process
THE SOLUTION
A secure, link-based checkout bridge for ERP
We built a secure, link-based checkout flow that connects ERP systems directly to modern payment infrastructure—with full PCI isolation, customer authentication, and automated post-payment processing via Azure Service Bus.
AFTER - SECURE FLOW
ERP System
NAV 2016/BC14
Secure Link
Time-Limited - Single-Use
Auth Gate
Order-specific verify
Braintree
Hosted Fields - PCI safe
Service Bus
Azure event publish
Order Release
Automated processing
STEP 01
Faster Processing
ERP users generate a unique, time-limited checkout link directly from NAV 2016 or Business Central. Each link is tied to a specific order and customer and delivered via branded email automatically.
STEP 02
Customer Authentication & Trust
Before accessing payment, customers authenticate using order-specific information, ensuring only the intended recipient can proceed. Links are validated for authenticity, expiration, and single use.
STEP 03
PCI-Safe Checkout Experience
Customers complete payment through a responsive, mobile-friendly checkout interface using Braintree Hosted Fields / Drop-in UI. Card data never touches ERP systems or internal services.
STEP 04
Reliable Post-Payment Automation
On successful authorization, payment details (non-sensitive only) are published to Azure Service Bus, enabling ERP systems to automatically continue order processing and release—no manual steps require
Architecture — PCI Isolation Boundary
ERP LAYER
Dynamics NAV 2016
Link generation
Business Central 14
Link generation
APP LAYER
Secure Link Service
Token validation
Auth Gateway
Customer verification
Checkout UI
Braintree Hosted Fields
PAYMENT
Dynamics NAV 2016
Link generation
EVENTS
Azure Service Bus
Non-sensitive payment confirmation event
PCI Isolation Boundary Active
Card data never enters ERP
Azure-native infrastructure
THE RESULT
From manual risk to automated confidence
Before this solution, collecting payments for ERP-generated orders was a friction-filled, high-risk process. Staff handled card details manually, orders stalled waiting on payment confirmation, and the business carried unnecessary PCI compliance exposure every single day.
The ERP Secure Checkout changed that entirely. By replacing manual workflows with a secure, automated payment flow, the team gained speed, reduced risk, and delivered a better experience for customers—all without touching the core ERP systems they relied on.
THE RESULT
Measurable security andoperational improvements
Reduced PCI Exposure
Card handling was completely removed from ERP systems and internal tools, dramatically reducing PCI scope and compliance risk.
Faster Order Release
Automated, event-driven payment confirmation via Azure Service Bus eliminated manual processing delays and bottlenecks.
Improved Customer Experience
Customers now complete payments through a simple, secure, self-service checkout—mobile-friendly and available on any device.
Operational Efficiency
Customer Service and Accounting teams no longer handle card details manually, freeing time and eliminating human error risk.
Scalable Foundation
The solution creates a repeatable pattern ready for future enhancements—SMS delivery, multi-brand support, and new ERP platforms.
Reusable Architecture
Built as an extensible pattern for securely collecting payments from ERP systems—ready to deploy across brands and future platforms.
Most importantly, the solution created a repeatable pattern for securely collecting payments from ERP systems—ready to be reused across brands and future platforms.
DEPLOYED WITH
PCI-Compliant
Powered by Braintree
Azure-Native
Microsoft ERP
CLIENT FEEDBACK
We no longer handle card details manually. The checkout just works—our team can focus on customers instead of chasing payment information.
John Doe
Global Digital Manager, Fairview Microwave