Table of Contents

sonarPay: Token Migration Process

Jennifer Trower Updated by Jennifer Trower

Read Time: 8 mins

This article provides the steps for you to request a Token Migration from your current card processor.

Sonar does not own credit card information or have a relationship with your payment gateway/processor; therefore, you have two paths to updating or retrieving card data:

To expedite your request, you will need to include the AOC and Visa Global Registry documents within your initial email. An example email template can be found using this link.

Path 1: 

You will need to ask all subscribers to update their payment information in the customer portal. This would be an initiative on your part to roll out a communication plan and give your customers instructions on what to do and by when. 

Path 2: 

This request cannot be initiated by Sonar.

You can request a token extraction from your current processor/gateway provider.

Sonar will provide an email template (found below) that will assist in your request. This request should be emailed directly to your provider’s support team – not a sales rep. Please copy or loop in payments@sonar.software on this request to ensure a smooth handoff of information. In some cases, requests must be made within your provider's customer login portal by creating a support ticket. 

Processes vary by gateway. Below are the required steps for each of the following providers.

Authorize.net

Stripe

CardConnect

ProPay

Moneris

Authorize.net Requirements: 

When sending a request, provide as much information in the initial request as you can. This helps to expedite the transfer and removes unnecessary communication.

We recommend you include sonarPay's AOC and Global Registry information, as well as the Full PGP Key, which you will find below.
  1. Log in to your gateway.
  2. Navigate to “contact us” in the upper right-hand corner.
  3. Click on “support center” in the pop-up screen.
  4. Select the general support case.
  5. Request a credit card token extraction (MID and information will be populated because you're logged into your account).
Request for Data Extraction form
Authorize.net will provide you with the following form to complete for your transfer request.
1. For the "Reason for Extraction", choose "switching to another provider" and in the space populated below that box, type in Payrix.
2. For the "Extraction Information" choose "Both" for services used.
3. When asked for number of records, type in "All".

A few things to note with this process:

  • This request comes with a $250 fee.
  • The process takes ~4–6 weeks. Extractions are only done 2x per month on a first come, first served basis.
  • A waiver is required to be signed before delivery of any information.
  • Auth.net will provide you with an encrypted file.
  • Auth.net will not provide information in a JSON format.
  • Auth.net will not provide information to a third party email address, which means someone from your company will receive the information and then be required to forward the information to payments@sonar.software.

Stripe Requirements:

When sending a request, provide as much information in the initial request as you can. This helps to expedite the transfer and removes unnecessary communication.

  1. You can initiate a data migration request or ask a data migration question via Stripe’s secure data migration request form
Please note: you must be logged into your Stripe account to access the form.

This form streamlines the account verification process and provides Stripe with all the relevant details needed for the migration.          

  1. After submitting the form, you will receive a confirmation that the form was received. Stripe will then follow up by email within the next 3 business days to answer any questions you may have and to provide you with the next steps for your migration process.

To meet PCI compliance obligations, Stripe can only transfer your card data to another PCI DSS Level 1-compliant payment processor, such as sonarPay.

Stripe requires the following information about sonarPay to complete this request:

  • sonarPay's current PCI Attestation of Compliance (AOC), or our listing on Visa’s Global Registry of Service Providers.
  • sonarPay's PGP public encryption key (found below), which is 4096 bits or greater. The key is hosted over HTTPS on one of sonarPay's domain names referenced in our AOC or Visa Registry listing (found below).

Once you let Stripe know that your new payment processor is sonarPay, they can usually confirm if sonarPay meets the above requirements.

Stripe requires confirmation for the following items:
1. The account name.
2. The Migration type; respond with export.
3. The processor to export data to; respond with Payrix.
4. What payment types to export; respond with cards and ACH. If you do not accept ACH, then just respond with cards.
5. What file format you need for export; request JSON.
6. If you need a full or partial export; respond with full.
Migratable Data

Stripe can help you migrate your customer card information to sonarPay. To do this securely, Stripe prepares an encrypted JSON export file containing your data, including the card details of your customers, email addresses, and any attached metadata. Then, they can arrange a secure transfer with sonarPay, which sonarPay will use this file to import the data into our system. You can start the migration process by using the contact us option and providing Stripe with sonarPay's name as your new payment processor.

CardConnect Requirements:

  1. Log in to CardPointe.
  2. Create a new support ticket.
    1. The subject of the ticket should be “Credit Card Token Migration”.

A few things to note with this process:

  • You should hear back in ~5 business days with the next steps.
  • Fees are a case-by-case situation.
  • CardConnect will provide you with an encrypted file. 

ProPay Requirements: 

  1. You will need to open a ticket by sending an email to Client Support: clientsupport@propay.com.
    1. The subject of the ticket should be “Credit Card Token Migration”, along with the company name and MID.
    2. Request a token extraction of your credit card data (reference the below template).
  2. A ticket will be opened, and a form will be sent to you to fill out. 

A few things to note with this process:

  • Fees are a case-by-case situation.
  • ProPay's Client Support number is 801-341-5312.

Moneris Requirements:

  1. You would have to contact the cancellations department and put in a request.
    1. Your request to do this could be done through your customer login via a support request to cancel services and extract their card tokens.
As a reminder, within your initial email, please include the AOC and Visa Global Registry documents to help expedite your request.

Here you can find our AOC and/or Visa Global Registry if a request is made by your current processor for this information.

Example of Token Extraction request:

Subject line: Token Migration request for Example ISP (example) MID:123456789 (example)

Hello [Gateway] Support, 

I’d like to request an export of all of my payment methods.

When the export is ready, please send the file to the following email address _______ in JSON format and reference my organization / merchant name. If you are not able to format in JSON, a CSV file is fine. 

Please encrypt using the Public Encryption Key (PGP) below. I have already included an AOC and Global Registry for your review to expedite this process.  

Please let me know if you have any questions.  

Thank you,

John Smith 

PGP Public Key
Expand to find the PGP Public Key for copy/paste use
-----BEGIN PGP PUBLIC KEY BLOCK-----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=Y0mE
-----END PGP PUBLIC KEY BLOCK-----

How did we do?

sonarPay Overview

Contact