What Can HostedPCI Do for You?
HostedPCI helps businesses reduce PCI scope by securely capturing, tokenizing, vaulting and routing sensitive payment data.
Instead of allowing cardholder data to pass through your website, CRM, ERP, contact center or other business systems, HostedPCI can securely handle the sensitive payment data while your applications work with tokens.
HostedPCI supports web, phone and integrated payment environments while giving businesses the flexibility to work with their preferred payment gateways and processors.
A. Credit Card Tokenization & Vaulting
HostedPCI securely vaults payment card data and replaces it with an HPCI token that can be used throughout your applications and payment workflows.
This allows your website, CRM, ERP, billing platform or other systems to reference a customer's payment method without storing the underlying card number.
Payment data can be securely captured using:
- Hosted iFrame Tokenization
- API Tokenization
Using tokenization can significantly reduce the amount of sensitive cardholder data entering your environment and help reduce PCI DSS scope.
Learn more about Tokenization & Vaulting →
B. Call Center & IVR Payments
HostedPCI helps businesses securely accept payment information over the phone while reducing the exposure of cardholder data to agents and contact-center systems.
HostedPCI IVR OmniFlow supports multiple payment workflows, including:
- Call Center IVR
- Self-Service IVR
- SMS Payment Links
- Call-Out IVR
Sensitive payment information is securely captured by HostedPCI and tokenized for use by the merchant's systems.
This can help organizations reduce the PCI scope associated with phone-based payment environments.
Learn more about IVR OmniFlow →
C. Secure Tokenization of Incoming Payment Data
Some businesses receive sensitive payment data from partners, platforms or other external systems.
HostedPCI can securely receive this information, tokenize the sensitive payment values and provide the merchant with a sanitized version containing HPCI tokens instead of the underlying card data.
This allows payment information to move between approved systems while reducing unnecessary exposure to sensitive cardholder data.
Learn more about Secure Data Flows →
D. Gateway Tokenization
HostedPCI can help businesses create and use tokens issued by supported payment gateways while keeping sensitive card data out of their own systems.
HostedPCI securely captures or retrieves the payment credential and exchanges the required information with the payment gateway. The gateway can then return its own token for supported transaction processing.
This allows businesses to use gateway-specific tokenization while maintaining a separate secure vaulting and tokenization layer through HostedPCI.
Learn more about Gateway Tokenization →
E. Payment Gateway Connectivity
HostedPCI connects businesses to a broad range of payment gateways and processors through a flexible payment integration layer.
Businesses can support multiple payment gateways without designing their entire payment architecture around a single provider.
This can help organizations:
- Add or change payment gateways
- Support multiple gateways at the same time
- Route payments across different providers
- Maintain greater control over stored payment credentials
- Reduce dependency on a single payment provider
View Supported Payment Gateways →
Payment Gateway Flow
Customer → HostedPCI → Payment Gateway
HostedPCI securely manages sensitive payment data between the customer, merchant systems and supported payment providers.
F. Transparent Data Flow
Some payment environments require sensitive data to move between applications, third parties, payment gateways or other approved endpoints.
HostedPCI's Transparent Data Flow provides a secure method of exchanging this information without unnecessarily exposing the underlying sensitive data to merchant applications.
Depending on the integration, HostedPCI can securely tokenize, detokenize and transform sensitive payment values as data moves between approved systems.
Learn more about Transparent Data Flow →
G. Data Residency
HostedPCI provides regional data residency options for businesses with geographic, operational or regulatory requirements around where payment data is vaulted.
Supported HostedPCI regions include:
- Canada
- United States
- Europe
- Australia
Data residency can be incorporated into a broader HostedPCI payment architecture alongside tokenization, payment gateway connectivity and other HostedPCI services.
Learn more about Data Residency →
Flexible Payment Security for Your Existing Environment
HostedPCI services can be used individually or combined to support more complex payment environments.
Whether you need to securely capture payment information, tokenize stored cards, support phone payments, connect multiple gateways or securely exchange payment data between systems, HostedPCI can be integrated into your existing payment architecture.
HostedPCI is designed to help reduce exposure to sensitive cardholder data while maintaining flexibility over your applications, gateways and payment providers.
Actual PCI DSS scope and applicable SAQ requirements depend on the complete payment environment and implementation.
Explore All HostedPCI Services →
Some of Our Clients
