Travel technology

Tokenization for travel payments

In travel, a card rarely stays where it was taken. It comes from travellers, partners and files, and goes on to suppliers, payment providers and staff. We take it in, keep it and send it on. Your systems hold tokens, which is what PCI compliance for a travel business comes down to.

How cards move in travel

Diagram: card details come in by card form, payment link, partner API, file or upload to the PCI Booking card vault, where each card becomes a token. Your system holds only the token. When your system sends the token back with an instruction, the vault sends the card on to payment providers, partner systems, secure display, files or another PCI Booking customer.
Diagram: card details come in by card form, payment link, partner API, file or upload to the PCI Booking card vault, where each card becomes a token. Your system holds only the token. When your system sends the token back with an instruction, the vault sends the card on to payment providers, partner systems, secure display, files or another PCI Booking customer.

Cards in

From travellers on your booking site or by a link sent by email or SMS. From partners' systems, by API or in files. Ready-made profiles for the major OTAs, channel managers and GDSs.

Cards stored

In our PCI DSS Level 1 vault. One token holds the whole card, so you can charge, share or pass it on later without asking again.

Cards out

To any of 120+ payment providers, in each merchant's own account. To hotels', suppliers' and partners' systems in their own format. To staff who need to see a card, by one-time link. As new virtual cards, to pay suppliers.

Who we work with

Find your part of travel

Each of these takes in cards it does not want to hold and passes them on to someone else. If that sounds like your business, the same approach applies.

Bedbanks and wholesalers

Take cards from the OTAs and agents that book your rooms, and pass them on to hotels and suppliers in each one's own format.

Tour operators and activity platforms

Take deposits and balances from travellers and pay suppliers, without card numbers in your systems.

Travel agencies and call centres

Send a secure link by email or SMS for bookings taken by phone, so agents never see a card number.

Corporate travel and travel management

Keep company and traveller cards on file and pass them to airlines, hotels and car rental when you book.

Airline, rail and ground transport tech

Take cards from passengers and partners and send them on to the provider or supplier that charges them.

Whichever part of travel yours is, or if it is not listed, tell us how your cards move. A solutions engineer replies within one business day.

Built for travel card flows

Ready-made partner connections

Ready-made profiles cover the major OTAs, channel managers and GDSs, so cards arrive tokenized.

Card by link

For bookings taken by phone or by an agent: the traveller enters the card in a secure form.

Charge through any provider

Each merchant charges through its own account, with one API across 120+ providers.

Show a card to a supplier

Hotel, tour and rental staff view the card by one-time link, protected by a one-time password.

Virtual cards

Issue virtual cards through your providers to pay suppliers, stored and sent on automatically.

3D Secure and PSD2

Payments authenticated with 3D Secure, in line with PSD2 Strong Customer Authentication.