v1.7.22 - Card-storage disclosure on hosted forms #
Hosted payment and card-setup forms now explain secure card storage and link buyers to the Card Storage Policy without interrupting their progress.
25 Aug 2026
Improvement
Checkout
Accessibility
Buyers entering a new card now see a consistent notice directly below the payment or card-setup button explaining that their card is stored securely in a PCI DSS-compliant vault. The notice links to the Card Storage Policy so buyers can learn more before submitting their details.
What changed
- Hosted payment and card-setup forms that collect a new card now display the card-storage disclosure automatically.
- The Card Storage Policy opens in a new tab, preserving the in-progress form and any details already entered.
- The notice adapts to the form theme and available screen width, and its link supports keyboard and screen-reader use.
- Saved-card and non-card payment flows are unchanged because they do not display the new-card form.
Why it matters
- Buyers receive clear, consistent information about card storage at the point where they enter their card details.
- Merchants receive one centrally maintained disclosure across hosted card flows without adding or synchronizing their own copy.
Developer notes
- The hosted form supplies the notice automatically, and it cannot be hidden or replaced. Do not render a duplicate card-storage notice around the form; review any custom copy already placed there.
- No public API, SDK, or configuration changes are required. There are no breaking changes, migrations, or other operational actions for standard integrations.