---
title: Privacy and Payments
slug: extensions/q7j_QQEGBdzaM9cOkE4az
docTags: 
createdAt: 2025-12-14T14:23:42.173Z
---

# Privacy and Payments

- Forter’s order validation call should be executed **between payment authorization and payment capture.** This positioning is important because the request to Forter uses the authorization response data. Based on the configuration, the payment capture either can or cannot be executed if Forter returns a “decline” decision.
- When the **Auto-invoice when transaction is approved** option is checked, the payment capture will be executed on approval.
- When a **decline** response is received, the action taken regarding voiding the payment depends on the merchant’s chosen configuration setting. Merchants can opt to void the payment manually or automatically, either immediately.
- Forter complies with and exceeds the requirements of **PCI DSS standard level 1,** and **Forter is PCI Level 1 Certified**.

Please note that **Forter does not collect full PAN** and that Forter is committed to the appropriate protection of the parts of Cardholders’ Data that it collects; this is achieved by a thorough hardening of the full Cardholders’ Data Environment (CDE).