There are three popular options: Recurly customers can host their own payment form, with payment information sent to their own servers. The payment information is then sent to Recurly via our API. This is the easiest option in terms of collecting payment information, but the most difficult in terms of meeting PCI compliance requirements. Unless you’re prepared to expend the time and resources to meet those very strict standards for PCI compliance, this option is not the best choice. Payment form redirect. This option lets you take payment information by redirecting your customers to a payment page hosted by Recurly. This is a far more secure option, although the page or form may not be fully customizable. Payment form on your site that sends payment information directly to a secure payment gateway. With this option, your servers aren’t actually receiving any sensitive financial information as it’s being submitted directly to the payment gateway. Not only are PCI compliance requirements minimized, you’re able to control the checkout experience. Recurly offers this option through Recurly.js. Take a look at the PCI Compliance Guide for more information.