Tokenization - Overview

Tokenization is the capability to securely store and manage payment methods on our API in any region and across both online (card not present) and in-store (card present) environments. It involves replacing sensitive data with unique identification symbols, or tokens, that retain all the essential information about the data without compromising its security. These tokens can be used in place of the actual data to perform operations, such as processing payments, without exposing the sensitive information itself.

The PCI DSS sets stringent requirements for handling and storing card information. Tokenization helps businesses comply with these regulations by minimizing the amount of sensitive data they handle and store.

Payment tokens are different from the access tokens required to authorize and use our API. For more information on access tokens, see our guide.

There are two types of payment tokens:

• Single-Use Payment Token – Valid for only a certain amount of time and for a single use, thus eliminating the risk of reuse in fraudulent activities. A single use token is automatically deleted after a few minutes, unless it is explicitly converted to a multi-use token to store the card information.
• Multi-Use Payment Token – Can be used for multiple transactions. These tokens are typically linked to a specific payment method and can be reused for various transactions until they are explicitly invalidated. They provide a balance between security and convenience, making them suitable for scenarios where recurring transactions are needed.

Now that you have an understanding of the tokenization types, the next step is to look at the tokenization capabilities our API can provide you.