SagePay Form, Direct or Server? which is best?

[LianneF]

Hi
I currently use SagePay form but someone is adding a one page checkout to my site and have suggested changing to sagepay direct so the customer only leaves the site to do 3d secure. Anyone have any comments on which one is best, do you think customers mind leaving the site to pay on the sagepay form, have you found direct better? any comments / advice would be much appreciated.
Thanks
Lianne

 

[kulture]

It is difficult to say which is BEST but the differences are as follows

Form
Your customer is taken offsite. For some this will look like you are a less professional site. for some you will have abandoned carts as they do not like being taken off site. For others they may prefer being taken off site, and feel more secure because security is being handled by Sagepay and not you.

Direct
You are not taken off site, the customer stays on your site throughout except for 3d validation. Some customers may prefer this and some may not. Depending on what you sell and who your customers are this could either have a better conversion rate or worse. The big problem with this interface is you need a PCI compliance and your site needs to pass a PCI security scan and potentially more requirements depending on your cart and the volume of transactions you do.

Server
Sage themselves say that this is the most secure interface. If implimented in an i-Frame (as they recommend) then the customer will not notice that they are going off site. It has all the advantages/disadvantages of Direct EXCEPT the PCI problem. Since all card processing INCLUDING their entry is on the Sage servers your PCI compliance needs come down.

 

[edmondscommerce]

That sums it up

we are recommending server these days..

However - please make sure you still get an SSL certificate - although the card details are entered into an iframe, the customer doesn't necessarily know that so you need to offer the assurance of the padlock symbol etc

 

[kulture]

Whatever method you use, get a SSL certificate. Nothing puts a customer off more than them entering their personal details on an un-secure site.