A method and apparatus for
processing a transaction between a merchant
system and a customer
system, the customer
system associated with a customer of the merchant are described. The method may include receiving, at a commerce platform, a transaction request from the merchant system, wherein the transaction request is generated by the merchant system and comprises a card identifier and encrypted
payment card data, wherein the card identifier is determined from card data for a
payment card used in the transaction and the encrypted
payment card data comprises at least an
encryption of a payment account number. The method may also include decrypting, by the commerce platform, the encrypted
payment card data using an
encryption key selected based on the card identifier, the
encryption key associated with the commerce platform. Furthermore, the method may include authorizing, by the commerce platform in communication with one or more
authorization systems, the transaction using the decrypted
payment card data.