Guides

Payment orchestration: routing, cascading and one API for several PSPs

Payment orchestration is a software layer between your checkout and several payment service providers, acquirers and alternative payment method providers. It exposes one API, routes each transaction by rules such as card country, currency, amount, cost or approval rate, retries soft declines on another connection, keeps stored card credentials portable and consolidates reporting. The orchestrator does not hold funds: each PSP settles to the merchant's own account.

By OrsunPay editorial teamPublished Updated

At a glance

What it isA software layer with one API in front of 2 or more PSPs, acquirers and APM providers
Holds fundsNo; each PSP settles to the merchant's own account, so a pure orchestrator acts as a technical service provider under PSD2 Article 3(j)
Routing inputsCard BIN and issuer country, card type, currency, amount, payment method, provider cost and live approval rate
Network tokens (Visa)Visa reports an average authorisation uplift of about 3% to 4.6% for card-not-present payments and around 30% less online fraud compared with card numbers (VisaNet data, 2022)
Network tokens (Mastercard, Europe)About 60% of Mastercard e-commerce transactions tokenised in June 2026; target 100% by 2030
Retry rulesVisa and Mastercard charge fees for excessive reattempts; hard declines (Visa Category 1, Mastercard advice codes 03 and 21) must never be retried
PCI DSS scopeSAQ A is possible with hosted fields from a compliant vault; since January 2025 SAQ A also requires confirming the whole site is protected against script attacks

What is payment orchestration?

A payment orchestration platform connects one checkout to many payment providers. Instead of integrating Stripe, Adyen, a domestic acquirer and a crypto processor separately, the merchant integrates once, and the orchestrator translates each request into the provider's API and normalises statuses, webhooks and reports.

The value lies in what one integration makes possible: routing each payment to the provider most likely to approve it at the lowest cost, switching connections when one fails, and moving volume without rebuilding the checkout. Contracts, pricing and settlement stay between the merchant and each PSP.

  • Connectors: one adapter per provider
  • Router: rules that pick a connection
  • Vault: card credentials and network tokens independent of any PSP
  • Webhooks: one event format for all providers
  • Back office: refunds, reporting and reconciliation

Payment orchestrator vs PSP vs payment gateway vs acquirer: who does what?

An acquirer is a licensed institution that accepts card payments for the merchant and settles funds. A PSP bundles acquiring with payment methods, onboarding and risk under its own licence. A payment gateway passes authorisation requests to one processor, and an orchestrator sits above several gateways and PSPs.

Only parties that hold funds need a payment institution, e-money or banking licence under PSD2. An orchestrator that never possesses funds is a technical service provider, which also means it cannot replace a PSP contract.

Responsibilities by role
QuestionAcquirerPSPPayment gatewayPayment orchestrator
Holds and settles fundsYesYes, or via partner acquirerNoNo
Needs a payment licence (EU)YesYesUsually noNo, if it never holds funds
Signs the merchant contractYesYesTechnical contract onlySoftware contract only
Number of processors connectedItself1, its own stackTypically 12 to several hundred
Routes between providersNoWithin its own networkNoYes, by rules

How does payment routing work?

Payment routing evaluates rules on each transaction before authorisation. Rules read checkout data such as the first 6 to 8 card digits (the BIN), issuer country, card type, currency, amount and method; advanced routers add live approval and error rates per connection.

Most merchants start with static rules and add cost and performance rules once they have data. An A/B split, for example 90% to the current PSP and 10% to a new one, measures a provider on real traffic before moving more volume.

Common routing rules and what they improve
Rule typeExampleMain lever
BIN and issuer countryPolish cards to a Polish acquirerApproval rate, local interchange
CurrencyGBP to a UK account, EUR to an EU accountAvoids 1% to 2% FX
AmountBaskets above €1,000 to the PSP with the best 3-D Secure flowApproval rate, fraud
CostEEA consumer debit to the interchange++ acquirerProcessing cost
Approval rateShift traffic when approvals drop 5 points below averageRevenue, resilience

What is cascading, and when should a declined payment be retried?

Cascading resubmits a failed or declined payment to another connection without asking the shopper to re-enter details. It is meant for timeouts, provider errors and some soft declines; hard declines must never be retried. Our payment cascading glossary entry covers which declines to cascade and the rules for doing it safely.

How do token vaults and network tokens fit into orchestration?

If one PSP stores your card data, saved cards and subscriptions are locked to it, and moving them takes a migration file and weeks of coordination. An orchestrator's vault stores credentials independently, so any connected PSP can charge a returning customer, and hosted fields keep card numbers off the merchant's servers.

Network tokens from Visa and Mastercard replace the card number with a token the scheme keeps current when a card is reissued, raising approval rates and cutting fraud. Provisioned once in the vault, they can be used across several acquirers.

What does orchestration change for a merchant with three PSPs?

Consider a European web shop processing €2 million a month at a €50 average basket: €1.5 million on cards, €0.4 million on local methods such as iDEAL and BLIK, and €0.1 million in crypto, across a global card PSP, a domestic interchange++ acquirer and a crypto processor.

With orchestration, EEA consumer debit goes to the interchange++ acquirer, other cards to the global PSP, and soft declines cascade between the two. These figures are a hypothetical, illustrative example, not OrsunPay results or a forecast: real outcomes depend on your card mix, provider contracts and traffic.

Hypothetical illustrative example, not OrsunPay results: €1.5 million attempted card volume, 30,000 card payments
MetricBefore: three separate integrationsAfter: one orchestration layer
Card approval rate86%89% (cascading +2, tokens +1 point)
Card volume approved€1.29 million€1.335 million
Average card pricing1.8% + €0.25 blendedAbout 1.2% + €0.15
Monthly card feesAbout €29,700 on approved volumeAbout €20,000 plus about €2,000 orchestration fee
APIs and webhook formats31
Card checkout in a PSP outageDownFails over

Do you need a payment orchestration platform, and should you build or buy?

Orchestration typically pays off with two or more PSPs, several countries or currencies, local methods your main PSP lacks, or a high-risk vertical where an account can be terminated at short notice. A single-country shop with one PSP usually gains little. For the full trade-offs of building in-house versus using a platform, see our build vs buy payment orchestration comparison.

Which payment orchestration companies are there?

The market splits into enterprise platforms for merchants, white-label software for PSPs and banks, and open source. Connector counts are the vendors' own figures and not directly comparable.

To add orchestration through OrsunPay, you connect your existing PSP accounts and integrate one API with signed webhooks; OrsunPay is a technical service provider that never holds funds. Rule-based smart routing and cascading are live.

Selected payment orchestration vendors, October 2026
VendorModelFocus and published figures
PrimerSaaSNo-code payment workflows, unified vault
Gr4vyDedicated cloud instanceEnterprise; 400+ payment methods and anti-fraud connections
SpreedlySaaSMerchant-owned vault, one API across 100+ countries
Hyperswitch (Juspay)Open source or hostedRust core, 100+ processor connectors
CellPoint DigitalSaaSAirlines and travel
AkuratecoWhite-label, SaaS or on-premisePSPs and banks; 700+ connectors
CorefySaaS and white-labelPSPs, iGaming, e-commerce; 650+ providers
OrsunPayTechnical service on the merchant's PSP accountsCommon API and signed webhooks; smart routing and cascading live

How to add a second PSP

  1. Define the reason for the second PSP Name the gap: approval in one country, cost on debit cards, a local method or an outage fallback. It decides which provider to sign and the first routing rule.
  2. Sign the merchant contract Open an account with the new PSP under your own legal entity. The orchestrator connects the account but cannot sign or underwrite it for you.
  3. Connect it through one integration Add the PSP's API credentials and webhook secret as a new connection, so checkout, refunds and reports keep using the same API.
  4. Make stored cards portable For saved cards or subscriptions, move credentials to a PSP-independent vault or request a card-data migration, and provision network tokens.
  5. Start with a small, measurable rule Route a slice, such as 10% of one country, to the new PSP and compare approval rate, cost and 3-D Secure friction for at least two weeks.
  6. Add failover and widen routing Enable cascading for technical errors and retryable soft declines, widen the rules, and reconcile both PSPs' settlements monthly.

Frequently asked questions

Does payment orchestration add latency to checkout?

It adds a network hop, typically tens of milliseconds, which shoppers do not notice next to issuer and 3-D Secure response times. A cascade adds a second authorisation, so cap retries at one or two per payment.

Does a payment orchestrator hold my money?

A pure orchestration layer does not. Funds flow from the acquirer or PSP to your settlement account under your own contract, so the software is a technical service provider, not a payment institution.

How is payment orchestration priced?

Vendors typically charge a few cents per transaction, a monthly subscription or both, often with annual minimums. PSP fees are paid separately to each PSP; self-hosted open source shifts cost to infrastructure and engineering.

Is a payment orchestration platform PCI DSS compliant?

A vendor that stores or transmits card data must be assessed as a PCI DSS service provider; ask for its Attestation of Compliance. With card data captured only in its hosted fields, a merchant can often use SAQ A if its whole site is protected against malicious scripts.

Can I keep my current PSP when I add orchestration?

Yes. Your current PSP becomes one connection and keeps its contract and pricing. Saved cards may need migrating to the orchestrator's vault before other PSPs can charge them.

What is the difference between a white label payment gateway and payment orchestration?

A white label payment gateway is software a PSP or bank rebrands for its own merchants. Payment orchestration manages several providers for a merchant or platform; vendors such as Akurateco and Corefy sell both.

Explore OrsunPay

See OrsunPay pricing

Sources