Payment methods
Add and manage cards via Stripe. SCA-compliant.
Norcube uses Stripe for card storage and charging. All card data is collected by Stripe's hosted Payment Element – Norcube never sees raw card numbers.
Add a card
- Open app.norcube.com → Billing → Payment methods.
- Click Add card.
- Fill in the Stripe Payment Element (card number, expiry, CVC, billing country, postcode). The form runs inside an iframe served by Stripe.
- Click Save. If your bank requires Strong Customer Authentication (3D Secure), you'll be prompted to authenticate inline.
The card is attached to your Stripe customer. The first card you add is automatically set as default.
Set the default
The default card is the one charged on monthly invoices. To change it:
- In Payment methods, click the ⋯ menu on a card.
- Click Set as default.
The change is immediate. Future invoices charge the new default; the previous one stays on file unless you remove it.
Remove a card
In the ⋯ menu → Remove. The card is detached from your Stripe customer.
You can't remove the only card if it's currently set as default and you have an active organization – set another card as default first.
SCA re-authentication
Some cards (mostly European) require Strong Customer Authentication for off-session charges. If a monthly charge requires SCA:
- Norcube emails you a dunning notice with a link.
- The link opens a page in app.norcube.com that triggers a fresh on-session payment intent.
- You complete the 3D Secure challenge inline.
- The charge confirms; the invoice is marked paid.
You have until the dunning grace period ends to complete SCA. See Dunning.
Test cards
Norcube uses Stripe's live mode in production. Test cards work in a staging environment available on request – contact us via the dashboard if you're building a custom integration that needs them.
Behaviour and edge cases
- Card data never touches Norcube servers. Tokenisation happens inside Stripe's iframe; we only store an opaque PaymentMethod ID.
- Expired cards generate a dunning notice on the next charge attempt. Update the card before then to avoid grace-period blocks.
- Each organization has its own Stripe customer. Multi-org users see each org's cards separately.