Card data never disclosed
Tokenisation involves replacing credit card data (number, expiration date, security code) with a unique identifier called a token.
This token does not contain any actionable sensitive data: it is specific to CentralPay and cannot be used outside of its environment.
For the merchant, this means that they never store or handle their customers’ actual card data.
CentralPay is PCI-DSS Level 1 compliant.
How does it work?
Tokenisation in four steps
01
Collection
Card data is entered on a secure page hosted by CentralPay, without passing through the merchant’s information system.
02
Tokenisation
A unique, secure token is generated and linked to the card within CentralPay’s PCI DSS-certified environment.
03
Restitution
The token is sent to the merchant. It is the only identifier the merchant is allowed to store and process, in order to minimize security risks.
04
Reuse
For subsequent transactions, the merchant submits the token to CentralPay, which matches it with the card and processes the payment.
Use case
A technical foundation suitable for a variety of activities
One click payment
The card is registered at the time of the first purchase. For all subsequent purchases, the cardholder does not need to enter any information; the token alone is enough to initiate the transaction.
Subscription and recurring payments
Consent is obtained once. The merchant then initiates the payments on the due dates without any action required from the customer.
Merchant-Initiated Transaction (MIT)
Unlike a subscription, the amount and date are variable. The token allows the merchant to bill on demand, without any action required from the customer.
Automatic card updates
If the token expires or is replaced, it is automatically updated across the networks. No transactions fail.
Card tokenisation with CentralPay
Discover what tokenisation with CentralPay has to offer.
Best conversion rate
The token allows customers to reuse a payment method without having to re-enter their information. Your customers can pay with a single click, and your subscriptions run smoothly: a seamless shopping experience with fewer abandoned carts.
Compliance under control
CentralPay handles PCI DSS compliance for you. Card data never passes through your information system. In the event of an incident, your liability is zero.
FAQ
Any questions about tokenisation?
The CentralPay infrastructure is PCI-DSS Level 1 certified, the highest possible certification for securing credit card data and preventing fraud. Every year, the tokenisation solution contributes to achieving PCI-DSS compliance, as it attests to adherence to credit card data protection standards.
Tokenisation is a technological process that addresses the compliance needs of entities that process credit card transactions and handle potentially sensitive data, such as e-commerce sites, marketplaces, digital platforms, and brick-and-mortar stores…
Tokenisation offers several benefits:
- Enhanced security: Sensitive card information is stored in an encrypted format within the CentralPay infrastructure.
- Frictionless payment processing: With tokens, merchants can reduce and simplify their processing and compliance requirements.
- Simplified recurring payments: Once stored, a token can be used multiple times without the payer having to re-enter their card information.