Braintree dual vaulting — enhanced features

Braintree dual vaulting — enhanced features

This page covers three Braintree platform features — network tokens, account updater, and smart retries — that work alongside UltraCart's dual vaulting to improve subscription rebill success rates and reduce involuntary churn.

Prerequisite: All three features require that dual vaulting is enabled so that cards are stored in both UltraCart's vault and Braintree's vault. See Braintree Credit Card Processing Gateway Integration for setup instructions.

All three features are configured by your PayPal/Braintree account manager on the merchant account. No UltraCart configuration changes are required beyond enabling dual vaulting.


How dual vaulting works with Braintree

When dual vaulting is enabled, UltraCart stores the card in its own vault and sends the card to Braintree for vaulting. Braintree returns a persistent payment method token that UltraCart stores alongside the card record. On subsequent rebills, UltraCart sends the payment method token to Braintree instead of the raw card number. Braintree resolves the token to the card on file and processes the transaction.

This token-based approach is what makes the three features below possible. Braintree manages the card data behind the token — updating it, securing it, and optimizing transactions against it — without UltraCart needing to know the details.


Network tokens

What it does

Network tokens replace the underlying stored card number with a secure digital token issued directly by the card network (Visa, Mastercard, etc.). This happens at the Braintree vault level — the payment method token UltraCart uses stays the same, but behind the scenes Braintree transacts with a network-issued token instead of the original card number.

Why it matters

  • Higher approval rates — Network tokens are recognized by issuers as more secure, resulting in fewer false declines. PayPal estimates approximately a 4.6% improvement in authorization rates.

  • Better security — Network tokens are restricted to the specific merchant, so they are useless if stolen.

  • Longer card lifecycle — Network tokens can survive card reissues in some cases, since the token is tied to the account rather than the physical card number.

How it works with UltraCart

No changes are required to UltraCart's integration. When network tokens are enabled on the Braintree merchant account, Braintree automatically provisions network tokens for eligible vaulted cards and uses them when processing transactions. UltraCart continues to send the same payment method token on rebills — Braintree handles the network token layer transparently.


Account updater

What it does

Account updater automatically keeps vaulted card details current. When a customer's card is replaced, expires, or is reissued by their bank, Braintree receives the updated card information from the card networks and updates the vaulted record. The payment method token remains the same — only the underlying card data changes.

Why it matters

  • Fewer failed rebills — Without account updater, a replaced or expired card causes the next subscription rebill to decline. The customer has to manually update their payment info or the subscription is lost.

  • Reduced churn — Failed rebills are one of the largest drivers of involuntary churn for subscription businesses. Account updater eliminates the most common cause.

  • No customer friction — Updates happen silently in the background. The customer never needs to take action.

How it works with UltraCart

When UltraCart sends a payment method token for a rebill, Braintree resolves it to the most current card information — whether it is the original card or an updated replacement. UltraCart does not need to know that an update occurred. The token-based approach means everything stays in sync automatically.


Smart retries

What it does

Smart retries optimizes declined transactions in real time. When a transaction is declined, Braintree can automatically re-attempt it through a different acquirer or with different payment credentials before returning a failed result. This happens transparently within the same transaction — there is no delay and no separate retry transaction to manage.

Why it matters

  • Recovers otherwise lost revenue — Transactions that would have failed on the first attempt can succeed on a real-time re-attempt through a different path.

  • No cost unless it works — The fee only applies to transactions that smart retries successfully recovers. You are not charged for attempts that still fail.

  • Zero operational overhead — There is nothing to configure, monitor, or manage. It works automatically on every transaction.

How it works with UltraCart

Smart retries operates at the Braintree platform level. When UltraCart submits a transaction (whether an initial charge or a subscription rebill), Braintree applies smart retries automatically if the transaction is declined. UltraCart receives the final result — either approved or declined — without needing to know whether a retry occurred behind the scenes.


How the three features work together

These features are complementary and address different failure points in the subscription rebill lifecycle:

Stage

Problem

Solution

Stage

Problem

Solution

Card data goes stale

Customer's card is replaced or expires

Account updater refreshes the card details automatically

Transaction security

Raw card numbers are less trusted by issuers

Network tokens provide issuer-trusted credentials that improve approval rates

Transaction processing

A valid transaction is declined due to routing or timing

Smart retries re-attempts through a different path in real time

Together, they create a layered defense against failed rebills:

  1. Account updater ensures the card on file is always current.

  2. Network tokens ensure the transaction is presented with the most trusted credentials.

  3. Smart retries ensure that even if a decline occurs, the transaction gets a second chance before failing.


Related pages