Security is built into how Flux works. Card data is captured in origin-isolated iframes on payments.fluxpayments.com and tokenized immediately, so it never touches your servers or domain. Flux is SAQ-D, PCI DSS Level 2 certified, which keeps your own PCI burden small.
Why businesses use it
SAQ-D Level 2 certified
Flux holds SAQ-D, PCI DSS Level 2 certification.
Isolated capture
Card data is entered in origin-isolated iframes, so it never touches your servers or domain.
Tokenized on capture
Cards are tokenized immediately, so your systems only handle tokens.
How it works
Every card entry happens inside an isolated iframe served from payments.fluxpayments.com. Flux tokenizes the card on capture, so your systems only ever handle tokens, and the sensitive environment stays on the Flux side.
Simple, transparent pricing
Flux charges a flat 2.9% plus 30 cents per transaction, with volume discounts for higher-volume merchants and no setup fees or contracts. Accounts processing under $100,000 a year in card volume may be subject to a $20 monthly account fee. You can also pass the processing fee to the customer at checkout where local surcharging rules allow.
Frequently asked questions
What PCI level does Flux hold?
Flux is SAQ-D, PCI DSS Level 2 certified.
Where is card data entered?
In origin-isolated iframes on payments.fluxpayments.com, so it never touches your servers or domain.
Does this reduce my PCI burden?
Yes. Because card data never touches your systems, your own PCI scope stays small.