Payments and what to know about them

{
  "schemaVersion": 1,
  "type": "architecture",
  "title": "Payments and what to know about them",
  "source": "Illustrative reference architecture",
  "width": 1000,
  "height": 1120,
  "architecture": {
    "boundaries": [
      {
        "id": "cloud",
        "label": "Cloud account"
      },
      {
        "id": "pci",
        "label": "Card data zone",
        "in": "cloud"
      }
    ],
    "components": [
      {
        "id": "shopper",
        "label": "Shopper",
        "kind": "person"
      },
      {
        "id": "checkout",
        "label": "Checkout",
        "kind": "frontend"
      },
      {
        "id": "gateway",
        "label": "API gateway",
        "in": "cloud"
      },
      {
        "id": "payments",
        "label": "Payment service",
        "in": "pci"
      },
      {
        "id": "vault",
        "label": "Token vault",
        "kind": "security",
        "in": "pci"
      },
      {
        "id": "ledger",
        "label": "Ledger",
        "kind": "database",
        "in": "cloud"
      },
      {
        "id": "provider",
        "label": "Card provider",
        "kind": "external"
      }
    ],
    "connections": [
      {
        "from": "shopper",
        "to": "checkout",
        "label": "pays"
      },
      {
        "from": "checkout",
        "to": "gateway",
        "technology": "HTTPS"
      },
      {
        "from": "gateway",
        "to": "payments",
        "label": "charge"
      },
      {
        "from": "payments",
        "to": "vault",
        "label": "tokenizes"
      },
      {
        "from": "payments",
        "to": "provider",
        "label": "authorizes",
        "technology": "HTTPS"
      },
      {
        "from": "payments",
        "to": "ledger",
        "label": "records",
        "technology": "SQL"
      }
    ],
    "mainPath": [
      "shopper",
      "checkout",
      "gateway",
      "payments",
      "provider"
    ],
    "orientation": "portrait",
    "notes": [
      {
        "on": "vault",
        "text": "Card numbers never leave the vault; everything else sees tokens."
      },
      {
        "on": "pci",
        "text": "Audited once a year; changes need a second reviewer."
      },
      {
        "text": "Figures and names are illustrative; the diagram shows the target state."
      }
    ]
  },
  "mobile": {
    "width": 440,
    "height": 1200
  }
}