SCA is the PSD2 mandate; 3DS2 is the protocol that satisfies it. Here’s the exact exemption math, what a compliant integration has to send, and what PSD3 changes.
A hosted 3DS2 solution means a third party runs the 3DS Server that initiates authentication requests, not the ACS and not your vault. Here’s what that boundary means for a team routing across multiple PSPs, and the integration path to get there.