What is Payment Tokenization?
Credit card tokenization is the process of replacing sensitive card data with a unique identifier (a token) that retains all of the essential information without compromising its security. The token cannot be mathematically reversed and is stored in First Atlantic Commerce’s payment gateway infrastructure.
The tokens support all payment models including authorization, capture and settlement, recurring and subscription billing and partial captures.
By employing FAC’s tokenization solution, merchants can move their customer’s credit card information out of their own environment. Credit card tokenization of data not only mitigates the potential impact of a security breach, but reduces the costs and scope of PCI.
PCI DSS Tokenization
FAC’s tokenization service is a Payment Card Industry Data Security Standard (PCI DSS) compliant solution that allows merchants to store their customer’s card details on our platform.
Our credit card tokenization solution removes consumer card data from a merchant’s payment environment, thereby minimizing the risks associated with handling and storing that data.
In PCI DSS, tokenization replaces the sensitive PAN (Permanent Account Number) with non-sensitive tokens. Under the credit card tokenization model, encrypted payment data is stored only in a central data vault and tokens replace the credit card values.
When a credit card is used for purchase, the number is transmitted to the tokenization system/server. A token using that data is generated and returned to the calling application and takes the place of the credit card number. This token can be passed around the network between applications and other business processes safely, while leaving the encrypted data it represents securely stored in a central data vault. The token therefore poses no threat to the security of cardholder data if stolen by a fraudster.
By reducing the scope of PCI DSS, merchants can lower the cost and hassle of PCI DSS compliance while ensuring best practice of cardholder information.