Is an electronic signature valid?

Yes. Electronic signatures are generally enforceable under the ESIGN Act (15 U.S.C. ch. 96) and state UETA statutes. Ensure the record shows signer intent, consent to electronic delivery, attribution, and reproducible retention.

Do I need a notary for a card authorization?

Generally no. Card holder agreements do not typically require notarization. If a contract contains powers, deeds, or state‑specific formalities, consult local statutes or counsel.

Can I store the CVV for recurring payments?

No. PCI standards and card network rules prohibit retention of sensitive authentication data such as CVV after authorization. Use tokenization or a PCI-compliant vault for recurring billing.

What happens if the cardholder disputes a charge?

Follow your dispute and chargeback procedures promptly: gather the signed agreement, transaction logs, and proof of delivery. Timely evidence and a clear authorization clause improve the merchant’s position in processor investigations.

How do I revoke authorization?

Cardholders may revoke recurring authorization per the agreement’s termination clause. Require written notice where specified and process revocations promptly to avoid further charges and potential liability.

Which state law governs the agreement?

Include a governing law clause naming the state whose law will interpret the agreement. For electronic execution, note that New York uses ESRA (NY Tech Law §301-309) rather than UETA in intrastate matters.

Card Holder Agreement

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

CARD HOLDER AGREEMENT

This Card Holder Agreement ("Agreement") is entered into between the parties identified below on the Effective Date set forth herein.

PARTIES

Issuer Name Issuer Address Card Holder Name Card Holder Address

RECITALS

WHEREAS, Issuer is authorized to issue corporate payment cards and to establish policies governing their use; and

WHEREAS, Card Holder has requested that Issuer issue one or more payment cards to Card Holder for business expenses and Card Holder agrees to be bound by the terms and conditions of this Agreement; and

WHEREAS, the parties desire to set forth their rights and obligations with respect to issued cards, permitted use, fees, and termination.

SCOPE OF WORK / AUTHORIZED USE

Card Holder shall use the issued card(s) only for legitimate business expenses and only in accordance with Issuer policies. Card Holder shall not use the card for personal transactions, cash advances beyond authorized limits, or for any purpose prohibited by law.

Detailed Authorized Purposes and Limits

CARD DETAILS & PARAMETERS

Card Type: Physical Virtual

Assigned Card Identifier

Credit Limit (per card)

Per-Transaction Limit

PAYMENT TERMS

Card Holder acknowledges responsibility for timely repayment of balances, fees, and any charges incurred through use of the card unless otherwise agreed in writing by Issuer.

Primary Billing Amount Due Payment Schedule (e.g., Net 30, Monthly) Late Payment Fee

TERM AND TERMINATION

This Agreement commences on the Effective Date and continues until terminated as provided below. Either party may terminate this Agreement for convenience by providing prior written notice to the other party as specified herein.

Start Date

End Date (if applicable)

Notice Period for Termination

Upon termination, Card Holder shall immediately cease use of the card, return any physical cards to Issuer, and remit any outstanding balances and fees within the period specified in Payment Terms.

CONFIDENTIALITY

Each party shall maintain in confidence all non-public business, financial, and operational information disclosed by the other party that is designated confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure ("Confidential Information"). Confidential Information does not include information that (i) is or becomes generally available to the public without breach of this Agreement, (ii) was known to the receiving party prior to disclosure, (iii) is received from a third party without restriction, or (iv) is independently developed by the receiving party without use of Confidential Information.

The receiving party shall not disclose Confidential Information except to employees, agents, or professional advisers who have a need to know and who are bound by confidentiality obligations at least as protective as those herein. The receiving party shall use Confidential Information solely for purposes of performing its obligations under this Agreement.

LIABILITY, INDEMNIFICATION, AND INSURANCE

Card Holder shall be liable for all charges made on the card except those that Issuer agrees in writing are unauthorized. Card Holder shall indemnify, defend and hold harmless Issuer from any claim, loss, liability, or expense (including reasonable attorneys' fees) arising from Card Holder's misuse of the card, breach of this Agreement, or violation of applicable law.

Issuer's liability for damages arising from Issuer's breach shall be limited to direct damages and in no event shall Issuer be liable for consequential, special, incidental, or punitive damages.

AUDIT AND RECORDS

Issuer may audit Card Holder's card transactions and supporting documentation upon reasonable notice. Card Holder shall maintain accurate records of transactions and shall provide copies of receipts or other supporting documentation upon request within ten (10) business days.

DISPUTES AND REMEDIES

Any dispute arising from or related to this Agreement shall first be addressed through good faith negotiations between authorized representatives. If unresolved within thirty (30) days, the dispute may be submitted to binding arbitration or to the courts as provided in the Governing Law section below.

GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the state specified below, without regard to its conflict of law principles.

Governing State

ENTIRE AGREEMENT

This Agreement constitutes the entire understanding between the parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, representations, and understandings, whether oral or written. No amendment or modification of this Agreement shall be effective unless in writing and signed by both parties.

NOTICES

All notices under this Agreement shall be in writing and delivered to the notice addresses set forth below by hand, certified mail, or overnight courier, and shall be effective upon receipt.

Issuer Notice Address Card Holder Notice Address

ADDITIONAL TERMS

Card Holder agrees to comply with Issuer's card program policies and any applicable corporate expense policies. Issuer may amend program policies upon written notice. Continued use of the card after notice of amendment constitutes acceptance of the amendment.

Additional Provisions / Comments

Issuer Name:

By:

Date:

Card Holder Name:

By:

Date:

What a Card Holder Agreement Is and when it applies

A Card Holder Agreement is a binding contract that sets the terms governing use of a payment card or stored card details between the cardholder and the merchant or issuing entity. It typically covers authorization for charges, billing and refund rules, recurring payment consent, handling of disputes, data storage permissions, and termination rights. In the United States these agreements may be executed on paper or electronically and should be drafted to satisfy ESIGN (15 U.S.C. ch. 96) and applicable state electronic transaction laws to ensure enforceability.

Why a clear Card Holder Agreement matters

A concise Card Holder Agreement clarifies liability, documents cardholder consent for charges, and reduces disputes. Properly structured agreements support regulatory compliance, protect against chargebacks, and provide a clear audit trail for billing and data-handling decisions.

Who prepares and who signs a Card Holder Agreement

Different parties create, review, and sign card holder agreements depending on use: merchants, payment processors, and consumers each have a role.

Cardholders and consumers who authorize charges and provide account details for one-time or recurring payments.
Merchants and billing departments that collect payment data, set refund/chargeback policies, and maintain records.
Payment processors and gateways that require contractual authorization for tokenization, storage, or recurring billing.

Clear role assignment speeds processing and ensures the correct party accepts payment terms and consent for storing or using card data.

Essential elements to include in a professional Card Holder Agreement

A well-drafted agreement balances clarity for the cardholder with operational terms for the merchant. Include plain-language provisions for authorization, billing schedule, dispute handling, data protection, fees, and termination so all parties understand rights and obligations.

Parties

Full legal names of cardholder and merchant, and any agent or processor acting on the merchant’s behalf; identify roles and contact details.

Authorization

Explicit statement authorizing the merchant to charge the card for specified amounts, including one-time, installment, or recurring transactions and tokenization for storage.

Fees and Billing

Describe amounts, billing frequency, refund policy, handling of failed payments, and any late or penalty fees tied to the account.

Dispute Process

Describe how the cardholder must notify disputes, merchant investigation timelines, and how chargebacks will be handled and documented.

Data Handling

Specify what card data will be stored, how it will be protected, whether CVV will be retained (avoid storing CVV), and compliance standards.

Termination

Conditions allowing either party to terminate authorization, notice requirements, and responsibilities for final settlement or refunds.

Required information and standard data fields

Cardholder Name: Full legal name

Card Number: Primary account number

Expiration Date: MM/YY

CVV: Three- or four-digit code

Billing Address: Street, city, state ZIP

Signature/Consent: Signed consent or e-signature

Step-by-step: completing a Card Holder Agreement

Follow these sequential steps to collect valid authorization and preserve an evidentiary record for billing and disputes.

01

Prepare agreement: Use a template listing charges, frequency, and dispute instructions.
02

Collect card data: Capture name, PAN, expiration, and billing address securely.
03

Obtain consent: Have the cardholder sign or e-sign and record intent.
04

Store evidence: Keep the signed agreement and audit trail in encrypted storage.

Where to file, share, and submit executed agreements

After signature, route copies to appropriate parties and retain an audit trail. Use secure channels and track delivery for compliance and customer service.

Merchant Records: Store executed agreement in merchant billing system for reconciliation.
Payment Processor: Send authorization token or required data to the gateway per processor rules.
Cardholder Copy: Provide a signed copy to the cardholder for their records.
Legal/Compliance: File an archived copy in encrypted storage for audits.

How to configure an online Card Holder Agreement workflow

Standardize your online workflow to reduce errors: define fields, choose signer authentication, add notifications, and set storage rules.

Field	Configuration
Template Name	Recurring-billing agreement template
Authentication	Email with SMS code or KBA for higher assurance
Conditional Fields	Show tokenization option when storing card
Notifications	Email receipts and renewal reminders

Technical considerations for eSigning and eSubmission

Ensure the platform supports required formats, authentication methods, and secure storage before collecting electronic cardholder consent.

Formats: PDF, DOCX, HTML accepted
Integrations: Common: Salesforce, NetSuite, Google Workspace
Security: TLS in transit; AES-256 at rest

eSignature vendor comparison for Card Holder Agreement workflows

Basic vendor feature and pricing differences to consider for cardholder authorizations, with signNow listed first per platform comparison conventions.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	Yes, 7-day free trial	Varies	Varies	Varies	Varies
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No envelope cap	100 envelopes/user/year	Varies	Varies	Varies

Key penalties and risks from an incorrect or incomplete agreement

Chargeback Liability: Merchant bears chargeback costs

Unauthorized Charges: Cardholder disputes and potential refunds

Contract Termination: Loss of billing permissions

Regulatory Fines: PCI or privacy violations risk fines

Reputational Harm: Customer trust loss

Operational Delays: Refunds and reconciliation work

Common preparation mistakes to avoid

Failing to obtain explicit electronic consent or missing ESIGN consumer disclosure can jeopardize enforceability and invite disputes.
Storing CVV or other sensitive authentication data after authorization violates PCI requirements and increases breach liability.
Using inconsistent name formats or incorrect billing addresses causes authorization declines and AVS mismatches.
Not capturing an audit trail (IP, timestamp, signer identity) reduces evidence available in chargeback investigations.

Practical tips for accurate and efficient completion

Apply these tips to reduce friction, speed acceptance, and preserve evidentiary records for billing and compliance.

Standardize a template

Use a single vetted template for recurring authorizations that includes explicit consent language, payment schedule, dispute steps, and contact details to reduce review cycles and legal exposure.

Use appropriate authentication

Choose signer authentication based on risk: email for low-value transactions, SMS or KBA for higher-value or recurring billing, and stronger methods where required by policy.

Minimize sensitive storage

Tokenize or outsource PAN storage to a PCI-compliant gateway. Never retain CVV, and document the tokenization process in the agreement.

Preserve an audit trail

Capture signer IP, email address, timestamps, and a copy of the final signed agreement so disputes and chargebacks can be defended with recorded intent.

How organizations use Card Holder Agreements in practice

Real-world examples show how different organizations collect authorization and manage signed records for payments and billing.

Martin Properties — Tenant Billing

Property management standardized recurring rent billing with an online Card Holder Agreement to avoid in-person collection.

This allowed tenants to provide consent remotely and reduced late payments.
The company reported faster processing and consistent audit trails for disputes while ensuring mobile and offline signing options supported their field staff.

Fertility Centers of Illinois — Patient Payments

A healthcare provider used signed cardholder authorizations for patient billing and recurring treatment fees.

The agreement captured consent and billing cycles.
This preserved HIPAA-conscious handling, required a BAA with the vendor, and ensured records supported insurance and audit requirements while protecting patient data.

Frequently asked questions about Card Holder Agreements

Answers to common legal, technical, and operational questions when preparing or executing card holder agreements online.

Need help? Contact support

Is an electronic signature valid?
Yes. Electronic signatures are generally enforceable under the ESIGN Act (15 U.S.C. ch. 96) and state UETA statutes. Ensure the record shows signer intent, consent to electronic delivery, attribution, and reproducible retention.
Do I need a notary for a card authorization?
Generally no. Card holder agreements do not typically require notarization. If a contract contains powers, deeds, or state‑specific formalities, consult local statutes or counsel.
Can I store the CVV for recurring payments?
No. PCI standards and card network rules prohibit retention of sensitive authentication data such as CVV after authorization. Use tokenization or a PCI-compliant vault for recurring billing.
What happens if the cardholder disputes a charge?
Follow your dispute and chargeback procedures promptly: gather the signed agreement, transaction logs, and proof of delivery. Timely evidence and a clear authorization clause improve the merchant’s position in processor investigations.
How do I revoke authorization?
Cardholders may revoke recurring authorization per the agreement’s termination clause. Require written notice where specified and process revocations promptly to avoid further charges and potential liability.
Which state law governs the agreement?
Include a governing law clause naming the state whose law will interpret the agreement. For electronic execution, note that New York uses ESRA (NY Tech Law §301-309) rather than UETA in intrastate matters.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now