Repeat-purchase and subscription merchants lose orders at exactly the wrong moment: a returning customer who already trusts you is forced to re-enter full card details on every checkout. Odoo's native payment module and provider connectors (Stripe, Adyen, Mollie, Authorize.Net, and friends) do support tokenization through the payment.token model, but the out-of-the-box experience is thin — token creation is tied to specific flows, the portal exposes little card management, there is no first-class "default card", no proactive expiry handling, and no clean 1-click reorder from a prior sale order. Merchants end up either accepting the friction or asking a developer to bolt fragile logic onto payment.transaction. This is where Odoo native runs out of road for a serious repeat-purchase operation.

ECOSIRE builds a purpose-designed module that leans on your gateway's vault so no PAN, CVV, or magnetic-stripe data ever touches the Odoo database — only opaque provider tokens are persisted, keeping your PCI scope in the light SAQ-A / SAQ-A-EP territory rather than full SAQ-D. Technically, we extend Odoo's payment.token and payment.transaction models with our own thin wrapper models (models.Model with fields.Many2one links to res.partner and the provider), add computed fields for masked display, is_default, and is_expiring_soon (driven by @api.depends on the stored expiry month/year), and enforce access with ir.model.access.csv plus record rules so a portal user can only ever see and use their own tokens. The customer-facing surface is delivered as QWeb/OWL portal templates: a "Saved cards" page under the customer portal, an express-pay button, and a 1-click reorder action that re-uses the stored token to raise and confirm a new sale.order and its payment.transaction in a single POST — with server-side guards, idempotency keys, and full logging.

Around that core we wire the operational glue: an Odoo automated action / ir.cron job that flags cards nearing expiry and triggers a branded reminder email (QWeb email template) so customers update details before a renewal fails; a "set default card" flow; and optional retry logic for soft declines. Everything is provider-abstracted against Odoo's payment.provider layer so the same UX works across your supported gateways, and admin-side reporting can be surfaced through list/form views or a QWeb report. Where you already drive orders from external systems, the saved-token reorder path is callable over Odoo's XML-RPC / JSON-RPC API, so a subscription engine or headless storefront can charge a vaulted card without a human in the loop. We build cleanly against Community or Enterprise (noting where Enterprise-only connectors change the token model) and target Odoo 17.0, 18.0, or 19.0 to match your instance.

Because this is build-to-order, nothing ships until we agree on scope. We start with a short scoping call to confirm your gateway(s), Community-vs-Enterprise edition, Odoo version, and the exact checkout and reorder flows you want. From confirmed scope, typical delivery is 2-4 weeks: we develop in a dedicated repo, install and demonstrate on a staging clone of your database for UAT, and only then deploy to production with a rollback plan. You receive the full installable source, technical and user documentation, a training session, and a post-go-live support window — this is your module, built and maintained for your business, not a black-box download.