A ready-made payment page served by the gateway itself, not your server, that handles the card form and security for you. You send your customer there and they come back when they're done, so your server never touches card data.