Payment gateways, processors and ISVs that implement Bluefin’s Decryptx stand-alone P2PE solution can now provide ShieldConex to secure online PII, PHI and financial data.
July 1st, 2020 – Atlanta, GA – Bluefin, the leading provider of payment and data security solutions that protect point-of-sale (POS) and online transactions, has announced the addition of their ShieldConex® data security platform to current and future Decryptx® P2PE integrations. This addition provides the industry’s first payment-agnostic service for both PCI-validated point-to-point encryption (P2PE) at the point-of-sale (POS) and the protection of Personally Identifiable Information (PII), Personal Health Information (PHI), and payment data entered into online forms.
Decryptx is the only solution that enables payment gateways, processors and software vendors globally to directly connect to Bluefin for PCI-validated P2PE through a simple API. Partners get the benefit of reducing PCI scope and cost for merchants without the need to become a PCI P2PE listed provider themselves. In addition to being the gold standard in POS payment security, P2PE also provides a new revenue stream and competitive differentiator for Bluefin’s partners.
Introduced in October 2019, ShieldConex utilizes Bluefin’s proprietary SAFE™ (Shielded Access Form Element) vaultless tokenization and iFrame solutions to protect PII, PHI, and financial data entered on a website. The solution secures valuable consumer data gathered via online web forms, not only protecting information as it is entered, but ensuring that it traverses a system or network only as tokens.
“Thanks to COVID-19, use of cash has plummeted while credit cards, contactless and mobile take center stage, resulting in more payment data traversing networks,” said Greg Cornwell, Chief Revenue Officer, Bluefin. “At the same time, the rise in online entry of data has meant that the most personal of consumer information, including passports, drivers’ license numbers, and dates of birth, are routinely being entered into web forms. Businesses globally need to focus on securing the data that they are processing, whether at the POS or online.”
Data privacy laws, including GDPR and CCPA, are requiring organizations to protect consumer information or face steep fines if their systems are breached and clear-text data is exposed. Both laws recommend pseudonymization and encryption as data security solutions that companies can implement to secure data, which Decryptx and ShieldConex utilize.
“Bluefin offers the most secure and holistic approach to protecting both payment and sensitive data,” said Ruston Miles, Chief Strategy Officer, Bluefin. “Not only are we the leaders in PCI-validated P2PE to secure retail, call center, kiosk and mobile payments, we now offer an accompanying online security platform with ShieldConex to secure the acceptance of any type of data entered into a web form, whether PII, PHI or financial.”
“By combining ShieldConex with our Decryptx solution, Bluefin’s partners can now offer our data security platform as a stand-alone solution to their client base without any additional integration or change to a merchant’s payment integration, protecting all data upon acceptance, in transit and storage,” added Miles.
Bluefin recently released a new white paper discussing the merits of encryption, tokenization and authentication to secure consumer data in the new digital economy while meeting global data privacy regulations.