Transmission of cardholder data and sensitive information is strictly limited to dedicated API channels and should never occur through insecure communication channels.