Skip to content
Senior web & app development · 20 capabilities
oakstone.digital
Websites & commerce / capability

Payment gateway integration
with the edge cases handled.

Stripe, PayPal, Adyen and regional gateways wired in with tax, refunds and edge cases handled.

This is for you if
  • Payment failures arrive as customer complaints, not alerts
  • Finance reconciles gateway payouts by hand each month
  • You are expanding into a market with different payment habits
A sharper way forward

The work should
change the numbers.

Tools we reach for
StripeAdyenPayPalKlarnaApple PayGoogle PayAvalara

Taking a payment is a two-hour job. Handling a payment properly is a two-week job, and the difference is entirely in the cases nobody demos: the failed webhook, the partial refund, the duplicate submission, the customer whose card is declined for tax-inclusive pricing in a country you had not considered.

We build payment flows that are idempotent, reconcilable and observable. Every transaction has a trail. Every failure has a defined behaviour. Finance can tie the gateway report to the ledger without a spreadsheet.

Because money is involved, this work is tested harder than anything else we ship — including deliberate failure injection before you go anywhere near live keys.

What's included

What the engagement
actually contains.

01

Method and provider selection

Fees, settlement times, regional coverage and payout mechanics compared against your actual order mix.

02

Checkout implementation

Cards, wallets, bank transfer and buy-now-pay-later wired in with clear error states and retry paths.

03

Compliance handling

SCA and 3-D Secure, PCI scope minimisation, and tax calculation for the regions you sell into.

04

Webhook and idempotency design

Duplicate-safe handlers with retries and dead-letter handling so a dropped event never means a lost order.

05

Refunds, disputes and subscriptions

Partial refunds, chargeback evidence, dunning and renewal logic built rather than improvised.

06

Reconciliation and reporting

Gateway payouts mapped to orders and to your accounting system, with variance alerting.

What you get
  • Live payment integration with test coverage
  • Webhook handlers with retry and replay tooling
  • Refund, dispute and subscription flows
  • Tax and compliance configuration
  • Reconciliation report or accounting sync
  • Runbook for payment incidents
Signals it is time
  • Payment failures arrive as customer complaints, not alerts
  • Finance reconciles gateway payouts by hand each month
  • You are expanding into a market with different payment habits
  • Subscription renewals fail silently
Common mistakes we fix

What usually went wrong
before we were called.

  • 01Webhook handlers with no signature verification and no idempotency key
  • 02Refunds that update the gateway but never the order record
  • 03No defined behaviour when the provider returns a timeout mid-charge
  • 04Discovering failed renewals from customer emails rather than alerts
How we measure it
  • Payment success rate by method and region
  • Involuntary churn on subscriptions
  • Manual reconciliation hours per month
  • Time to detect a failed webhook
Typical timeline

2–4 weeks for a standard integration; 5–8 with subscriptions and tax

Practicalities

What week one
actually looks like.

First week

A written map of every payment path, including refunds, disputes, retries and renewals, plus deliberate failure testing against sandbox keys before anything touches live money.

What we need from you
  • Gateway sandbox and live credentials
  • Tax and invoicing rules by region
  • A finance owner for reconciliation sign-off
  • Existing dispute and refund policies
Not included
  • Negotiating your gateway fees
  • Bookkeeping or accounting services
  • Chargeback representation
  • PCI Level 1 audit services

Scope boundaries stated up front rather than discovered in a change request.

How the work runs

Four stages, visible throughout.

01

Diagnose

Analytics, search data, sales conversations and a technical audit read together, so the brief is based on evidence rather than opinion.

02

Structure

Message hierarchy, page architecture and URL plan agreed before design starts — the decisions that are expensive to change later.

03

Build

A component system engineered by seniors, with technical SEO, accessibility and performance handled as we go rather than bolted on.

04

Prove

Staged launch, redirect and coverage monitoring, and conversion measured against the baseline we took before starting.

Questions buyers actually ask

Payment gateway integration, answered.

For most teams selling in Europe and North America, Stripe is the pragmatic default: excellent APIs, predictable fees, strong subscription tooling. Adyen wins at scale and for complex multi-entity settlement. Regional methods matter more than brand once you sell outside your home market.

We design so that card data never touches your servers — hosted fields or redirect flows keep you in the lightest compliance tier available. We will tell you plainly which SAQ level your setup implies.

Yes, and it is common work. Typical findings are missing idempotency keys, unverified webhook signatures, no retry handling and refunds that update the gateway but not the order record. We audit, prioritise by financial risk, then fix.

A better brief starts here

Make payment gateway integration useful.

Bring us the hard thing. We will bring a point of view, a senior team and a clear next step.

Start a conversation