Guides
Payment orchestration: routing, cascading and one API for several PSPs
Payment orchestration is a software layer between your checkout and several payment service providers, acquirers and alternative payment method providers. It exposes one API, routes each transaction by rules such as card country, currency, amount, cost or approval rate, retries soft declines on another connection, keeps stored card credentials portable and consolidates reporting. The orchestrator does not hold funds: each PSP settles to the merchant's own account.
At a glance
| What it is | A software layer with one API in front of 2 or more PSPs, acquirers and APM providers |
|---|---|
| Holds funds | No; each PSP settles to the merchant's own account, so a pure orchestrator acts as a technical service provider under PSD2 Article 3(j) |
| Routing inputs | Card BIN and issuer country, card type, currency, amount, payment method, provider cost and live approval rate |
| Network tokens (Visa) | Visa reports an average authorisation uplift of about 3% to 4.6% for card-not-present payments and around 30% less online fraud compared with card numbers (VisaNet data, 2022) |
| Network tokens (Mastercard, Europe) | About 60% of Mastercard e-commerce transactions tokenised in June 2026; target 100% by 2030 |
| Retry rules | Visa and Mastercard charge fees for excessive reattempts; hard declines (Visa Category 1, Mastercard advice codes 03 and 21) must never be retried |
| PCI DSS scope | SAQ A is possible with hosted fields from a compliant vault; since January 2025 SAQ A also requires confirming the whole site is protected against script attacks |
What is payment orchestration?
A payment orchestration platform connects one checkout to many payment providers. Instead of integrating Stripe, Adyen, a domestic acquirer and a crypto processor separately, the merchant integrates once, and the orchestrator translates each request into the provider's API and normalises statuses, webhooks and reports.
The value lies in what one integration makes possible: routing each payment to the provider most likely to approve it at the lowest cost, switching connections when one fails, and moving volume without rebuilding the checkout. Contracts, pricing and settlement stay between the merchant and each PSP.
- Connectors: one adapter per provider
- Router: rules that pick a connection
- Vault: card credentials and network tokens independent of any PSP
- Webhooks: one event format for all providers
- Back office: refunds, reporting and reconciliation
Payment orchestrator vs PSP vs payment gateway vs acquirer: who does what?
An acquirer is a licensed institution that accepts card payments for the merchant and settles funds. A PSP bundles acquiring with payment methods, onboarding and risk under its own licence. A payment gateway passes authorisation requests to one processor, and an orchestrator sits above several gateways and PSPs.
Only parties that hold funds need a payment institution, e-money or banking licence under PSD2. An orchestrator that never possesses funds is a technical service provider, which also means it cannot replace a PSP contract.
| Question | Acquirer | PSP | Payment gateway | Payment orchestrator |
|---|---|---|---|---|
| Holds and settles funds | Yes | Yes, or via partner acquirer | No | No |
| Needs a payment licence (EU) | Yes | Yes | Usually no | No, if it never holds funds |
| Signs the merchant contract | Yes | Yes | Technical contract only | Software contract only |
| Number of processors connected | Itself | 1, its own stack | Typically 1 | 2 to several hundred |
| Routes between providers | No | Within its own network | No | Yes, by rules |
How does payment routing work?
Payment routing evaluates rules on each transaction before authorisation. Rules read checkout data such as the first 6 to 8 card digits (the BIN), issuer country, card type, currency, amount and method; advanced routers add live approval and error rates per connection.
Most merchants start with static rules and add cost and performance rules once they have data. An A/B split, for example 90% to the current PSP and 10% to a new one, measures a provider on real traffic before moving more volume.
| Rule type | Example | Main lever |
|---|---|---|
| BIN and issuer country | Polish cards to a Polish acquirer | Approval rate, local interchange |
| Currency | GBP to a UK account, EUR to an EU account | Avoids 1% to 2% FX |
| Amount | Baskets above €1,000 to the PSP with the best 3-D Secure flow | Approval rate, fraud |
| Cost | EEA consumer debit to the interchange++ acquirer | Processing cost |
| Approval rate | Shift traffic when approvals drop 5 points below average | Revenue, resilience |
What is cascading, and when should a declined payment be retried?
Cascading resubmits a failed or declined payment to another connection without asking the shopper to re-enter details. It is meant for timeouts, provider errors and some soft declines; hard declines must never be retried. Our payment cascading glossary entry covers which declines to cascade and the rules for doing it safely.
How do token vaults and network tokens fit into orchestration?
If one PSP stores your card data, saved cards and subscriptions are locked to it, and moving them takes a migration file and weeks of coordination. An orchestrator's vault stores credentials independently, so any connected PSP can charge a returning customer, and hosted fields keep card numbers off the merchant's servers.
Network tokens from Visa and Mastercard replace the card number with a token the scheme keeps current when a card is reissued, raising approval rates and cutting fraud. Provisioned once in the vault, they can be used across several acquirers.
What does orchestration change for a merchant with three PSPs?
Consider a European web shop processing €2 million a month at a €50 average basket: €1.5 million on cards, €0.4 million on local methods such as iDEAL and BLIK, and €0.1 million in crypto, across a global card PSP, a domestic interchange++ acquirer and a crypto processor.
With orchestration, EEA consumer debit goes to the interchange++ acquirer, other cards to the global PSP, and soft declines cascade between the two. These figures are a hypothetical, illustrative example, not OrsunPay results or a forecast: real outcomes depend on your card mix, provider contracts and traffic.
| Metric | Before: three separate integrations | After: one orchestration layer |
|---|---|---|
| Card approval rate | 86% | 89% (cascading +2, tokens +1 point) |
| Card volume approved | €1.29 million | €1.335 million |
| Average card pricing | 1.8% + €0.25 blended | About 1.2% + €0.15 |
| Monthly card fees | About €29,700 on approved volume | About €20,000 plus about €2,000 orchestration fee |
| APIs and webhook formats | 3 | 1 |
| Card checkout in a PSP outage | Down | Fails over |
Do you need a payment orchestration platform, and should you build or buy?
Orchestration typically pays off with two or more PSPs, several countries or currencies, local methods your main PSP lacks, or a high-risk vertical where an account can be terminated at short notice. A single-country shop with one PSP usually gains little. For the full trade-offs of building in-house versus using a platform, see our build vs buy payment orchestration comparison.
Which payment orchestration companies are there?
The market splits into enterprise platforms for merchants, white-label software for PSPs and banks, and open source. Connector counts are the vendors' own figures and not directly comparable.
To add orchestration through OrsunPay, you connect your existing PSP accounts and integrate one API with signed webhooks; OrsunPay is a technical service provider that never holds funds. Rule-based smart routing and cascading are live.
| Vendor | Model | Focus and published figures |
|---|---|---|
| Primer | SaaS | No-code payment workflows, unified vault |
| Gr4vy | Dedicated cloud instance | Enterprise; 400+ payment methods and anti-fraud connections |
| Spreedly | SaaS | Merchant-owned vault, one API across 100+ countries |
| Hyperswitch (Juspay) | Open source or hosted | Rust core, 100+ processor connectors |
| CellPoint Digital | SaaS | Airlines and travel |
| Akurateco | White-label, SaaS or on-premise | PSPs and banks; 700+ connectors |
| Corefy | SaaS and white-label | PSPs, iGaming, e-commerce; 650+ providers |
| OrsunPay | Technical service on the merchant's PSP accounts | Common API and signed webhooks; smart routing and cascading live |
How to add a second PSP
- Define the reason for the second PSP Name the gap: approval in one country, cost on debit cards, a local method or an outage fallback. It decides which provider to sign and the first routing rule.
- Sign the merchant contract Open an account with the new PSP under your own legal entity. The orchestrator connects the account but cannot sign or underwrite it for you.
- Connect it through one integration Add the PSP's API credentials and webhook secret as a new connection, so checkout, refunds and reports keep using the same API.
- Make stored cards portable For saved cards or subscriptions, move credentials to a PSP-independent vault or request a card-data migration, and provision network tokens.
- Start with a small, measurable rule Route a slice, such as 10% of one country, to the new PSP and compare approval rate, cost and 3-D Secure friction for at least two weeks.
- Add failover and widen routing Enable cascading for technical errors and retryable soft declines, widen the rules, and reconcile both PSPs' settlements monthly.
Frequently asked questions
Does payment orchestration add latency to checkout?
It adds a network hop, typically tens of milliseconds, which shoppers do not notice next to issuer and 3-D Secure response times. A cascade adds a second authorisation, so cap retries at one or two per payment.
Does a payment orchestrator hold my money?
A pure orchestration layer does not. Funds flow from the acquirer or PSP to your settlement account under your own contract, so the software is a technical service provider, not a payment institution.
How is payment orchestration priced?
Vendors typically charge a few cents per transaction, a monthly subscription or both, often with annual minimums. PSP fees are paid separately to each PSP; self-hosted open source shifts cost to infrastructure and engineering.
Is a payment orchestration platform PCI DSS compliant?
A vendor that stores or transmits card data must be assessed as a PCI DSS service provider; ask for its Attestation of Compliance. With card data captured only in its hosted fields, a merchant can often use SAQ A if its whole site is protected against malicious scripts.
Can I keep my current PSP when I add orchestration?
Yes. Your current PSP becomes one connection and keeps its contract and pricing. Saved cards may need migrating to the orchestrator's vault before other PSPs can charge them.
What is the difference between a white label payment gateway and payment orchestration?
A white label payment gateway is software a PSP or bank rebrands for its own merchants. Payment orchestration manages several providers for a merchant or platform; vendors such as Akurateco and Corefy sell both.