A PCI-compliant card-detail input. The user enters their card number, expiry, and CVC; the platform handles tokenisation through the configured payment provider (Stripe, by default) and stores only the safe token in the row.
Conditional options
None.
How card data is handled
- The card number is never sent to your server. The browser tokenises it directly with the payment provider's secure script.
- The token (and last 4 digits, brand, expiry) are returned to your server and stored on the row.
- Subsequent charges use the token, not the raw card number.
Configuration
Make sure Stripe is connected via Site Settings → Stripe (the public API key is what powers the front-end tokenisation). Without a connected payment provider this field type can't be used.