CardSecure combines CardConnect’s powerful PCI-validated point-to-point encryption (P2PE) and patented tokenization for powerful payment data protection.
Through the use of our tokens, which are considered outside of PCI scope, you can greatly reduce:
- The time spent on compliance management
- The cost of annual audit
- The possibility of the business falling victim to a breach
- The size of the PCI questionnaire (from 300 questions to a mere dozen for many businesses)
- Sensitive data is encrypted at the point of interaction, whether a credit card number is swiped, dipped or keyed into a terminal.
- Encrypted data is securely escorted to our cloud-based PCI-compliant CardSecure vault, where it is tokenized. This irreversible tokenization solution replaces sensitive information with valueless tokens, which are useless to a criminal hacker should a business’s system or network be breached.
- Tokens are then securely returned to the system and can be used across a business’s omnichannel environment for the security of all payment acceptance needs.
Compliant with data integrity checks including the Luhn test, CardConnect’s tokens are completely unique to each of our customers, applying only to a merchant’s associated accounts and identification numbers.
- Persistent or One-Time Tokens
Tokens can be permanently generated to support recurring payments or new tokens can be generated for one-time use every time the card is accepted.
- Custom + Secured
Tokens generated are completely unique to each merchant and cannot be used outside of a merchant’s CardConnect instance.
CardSecure tokenizes sensitive information including:
- Credit card numbers
- Bank account numbers
- Social security number
- Personal information (e.g. driver's license, email address, birth date, etc.)
- Up to five additional custom data types
CardConnect generates 16-digit tokens to replace credit card numbers based on the below formula:
Original Visa card number 4485290846919507 is tokenized to become 9449635287419507
- A “9” is added to the front of the card number (no card brand issues cards that begin with this number)
- First two digits of the original card number remain
- Last four digits of original card number remain