Share cards with staff and suppliers

Show or send a card without handling it

Store a card once, then show or send it to the staff, agents and suppliers who need it: a hotel, a tour operator or a car rental desk, for example. Your systems keep a token.

Display, forward or share · PCI DSS Level 1 since 2016

For OTAs and booking engines, PMS and hotel tech and channel managers

Where the card goes

Send a token. We deliver the card.

Diagram: your system sends a token to the PCI Booking vault; the vault shows the card to hotel staff by one-time link, sends it to a supplier system in its format, and shares the card by token with another PCI Booking customer.
Diagram: your system sends a token to the PCI Booking vault; the vault shows the card to hotel staff by one-time link, sends it to a supplier system in its format, and shares the card by token with another PCI Booking customer.

Show a card to people

Staff see the card. Your systems do not.

Display in a secure form

Your staff, agents or partners view the card details in a secure form served by PCI Booking. The card never passes through your application.

Display by one-time-password link

Send a staff member or agent a link. They open it with a one-time password and see the card on a page we serve, so your systems stay out of PCI scope. Showing a card to a partner adds nothing to your scope. When your own staff view it, only that person, their browser and what they do with the card fall within a very limited scope.

Send a card to systems

Pass it on in the format they expect

Forward to any approved system

Send the card to a hotel, supplier, partner or other approved destination, in the format that system expects. The major OTAs, channel managers and GDSs have ready-made profiles. For any other system, you build the request with a token placeholder and we put the card in on the way out.

Share by token with a partner

A partner that also uses PCI Booking gets the card by token, with no card number passed. Neither of you handles the card.

Deliver inside files

Put cards into the files a partner expects, delivered to the partner's SFTP server, without the card ever sitting in your system.

Pay with a virtual card

Issue a virtual card through your own provider and send it to the hotel or supplier like any other card.

You decide where cards can go

Cards only go to destinations you have approved. Display links check the recipient with a one-time password. Sub-users, API keys and IP restrictions control who can ask.