Map 2
Send a link, take the payment, show the status
The whole European-market path in one picture: Order first, link second, guest pays on an unauthenticated CDE page, status returns to the TD/CrD. The non-EU branch leaves at the market check and keeps the Go To Payment flow it has now. Dashed boxes are open questions, dashed edges are the decline and the retry.
- Person step
- System step
- External integration
- Decision
- Unknown or TBC
- Exception or loop-back
Numbered markers on the diagram (Q1, Q2, Q3, Q4, Q5, Q7, Q8, Q9, Q10) match the question table on the overview.
Facts
- The email pre-fills from the Enterprise client record for the lead guest or the travel agent. 240005
- TD/CrD may change the email per guest, because other guests commonly pay on their own email. 240005
- Validation is format only. 240005
- TrustPayments returns the result to the Payment Service. 242191
- A receipt is sent from GFOB once TrustPayments confirms. The sending system is TBC. 240003
Assumptions to confirm in refinement
- The order is created before the market decision. 240005 puts order creation on Check Out; confirm the non-EU path is unaffected. 240005 · Q9
- Status NEW carries “link sent, unpaid”. See Map 3. 242191 · Q6
Open questions
- Token expiry rule and anchor. 242191 · Q1
- PCI and GDPR constraints on the token and the audit log. 242191 · Q2
- Address verification on the landing page. 240003 · Q3
- Which system sends the GFOB receipt. 240003 · Q4
- Where payment status lives in TDP. 240009 · Q5
- Callback contract, retries and idempotency on the result path. 242191 · Q7
- Which email service sends the link and how bounces come back. 240005 · Q8
- Scope of the Finance per-departure payment report. 242191 · Q10