Subscribe with Stripe Checkout. Card details are collected by Stripe — never by Transit (PCI SAQ A path).