RE: Order Management, eCommerce and Fulfillment Solutions for Direct Merchants
From my perspective, the issue is one of resolving the competing forces at play - 'best practice' vs PCI DSS compliance. Historically, the advice has always been to pre-auth card transactions and poll (take money) on dispatch of goods, particularly in a lean mail order or ecommerce operation where back orders lead times can be prevalent. Unfortunately, for many reasons (too numerous to list) related to PCI compliance, the ability to pre-auth and poll can no longer be taken for granted. The move to 'tokenisation' of card payments is probably the best and only way to go, but it does raise many technical and compatibility issues between back office systems and payment service providers. Indeed many of our clients (particularly new-generation e-tailers) are choosing to take payments on confirmation of order and, in effect, process fully paid transactions. So amongst the many other factors, I would list 'compliance and compatibility' at the top of my list when considering the many options and providers available.