# Electronic Payment Exchange (EPX)

> EPX is a full-stack, PCI-compliant payments platform (part of North / North American Bancard) acting as ISO, merchant acquirer, gateway, and front- and back-end processor. Its BRIC technology tokenizes every transaction so cardholder data never touches the merchant environment. Developers integrate via Hosted Checkout, the Hosted Pay Page, the Browser Post API, and the North EPX Custom Pay REST API.

## APIs

- [EPX Payments API](https://developer.north.com/): Hosted Checkout, Hosted Pay Page, Browser Post API, and Custom Pay REST API for sales, authorizations, captures, refunds, voids, recurring billing, and batch settlement. Production host https://secure.epx.com, UAT host https://secure.epxuap.com.

## Docs

- [Developer Portal](https://developer.north.com/)
- [Hosted Checkout Integration Guide](https://developer.north.com/products/online/epx-hosted-checkout/integration-guide)
- [EPX Data Dictionary — Transaction Request Fields](https://developer.north.com/supplemental-resources/epx-data-dictionary/transaction-request-fields)
- [Custom Pay REST API tutorial (Node.js)](https://developer.north.com/blog/tutorial-nodejs-browser-post-custom-pay-api)
- [Developer Blog](https://developer.north.com/blog)

## Authentication

- Legacy four-part processing key (CUST_NBR, MERCH_NBR, DBA_NBR, TERMINAL_NBR) on Browser Post / Hosted Pay Page requests.
- EPI-Id + EPI-Signature (+ EPI-Trace) HMAC-style signed headers for the Custom Pay REST API.
- No OAuth 2.0 / OIDC surface.

## Company

- [EPX Website](https://www.epx.com/)
- [Terms of Service](https://www.epx.com/terms)
- [Privacy Policy](https://www.epx.com/privacy-policy)
- [Support / Contact](https://www.epx.com/contact)
- [Status Page](https://trust.paymentshub.com/)