Paytia launches AI payment tool that keeps card data out of models

Paytia on July 15 launched Conversational & AI Payments, a service built on its Capture Assist API to let AI agents take phone and chat payments without exposing card data to the model, transcripts or logs. The launch aims to close a PCI compliance gap as businesses roll out more AI agents into customer conversations.

Why it matters: - AI agents are increasingly handling customer conversations, and payment collection creates a compliance risk if card data enters the model’s context window. - Paytia’s approach keeps sensitive data outside the AI system, which reduces exposure in call recordings, chat logs and training data. - The service is designed to help businesses take payments inside AI-led conversations without breaking PCI DSS requirements.

What happened: - Paytia launched Conversational & AI Payments on July 15, built on its Capture Assist API. - The service lets businesses accept bank or card payments during AI conversations by phone or chat. - The payment step happens outside the AI, so the bot can continue the conversation without handling raw card details. - Paytia said the launch is now available.

The details: - When an AI agent reaches a payment step, it calls Capture Assist. - Customers enter card details on Paytia’s hosted form or by keypad during a call. - Paytia processes the payment on its PCI DSS Level 1 SecureFlow platform. - The platform returns a token and a result, and the bot resumes the conversation. - The service also keeps bank account details, passport numbers and national insurance numbers outside the AI conversation flow. - For telephone agents, Paytia connects over SIP in two modes: in front of the bot for total isolation, or by conferencing in on demand when payment is needed. - A unique call ID in the SIP header can trigger capture. - For chat agents, payment capture happens through Advanced Payment Links. - The service works with the platforms teams are already using. - Existing Paytia customers can enable the service with a configuration change rather than a new contract. - Paytia backs the service with a Data Protection Agreement. - Paytia acts as the appointed data processor, with terms covering how sensitive data is captured, retained and deleted. - Card data is never logged or used to train models. - Paytia holds PCI DSS Level 1 and Cyber Essentials Plus certification. - Paytia says it has processed more than £400 million since 2020.

Between the lines: - The launch reflects a broader race to deploy AI agents in customer service before compliance systems are fully adapted. - Paytia is positioning isolation of payment data from the model as the core security requirement for AI-driven checkout. - The product also suggests a practical path for companies that want AI conversation automation without redesigning their payment stack.

What's next: - Businesses using AI phone and chat agents can now add payment collection through Paytia without passing card data through the model. - The release may push more AI deployments toward payment architectures that separate conversation handling from sensitive data capture. - Paytia is now offering the service to customers across its existing payment channels.

The bottom line: - Paytia is trying to make AI payments workable by drawing a hard line between the model and the cardholder data. In PCI terms, that separation is the product.