Personal Payment Data Security for Every Intake Channel

2020 will be the year of personal payment and data security, thanks to the unprecedented rise of breached records in 2019 to over 600 million and the EU’s General Data Protection Regulation (GDPR) and California’s Consumer Privacy Act (CCPA) regulations. With fines reaching the hundreds of millions under these laws, it is imperative to protect consumer payment and personal data. Bluefin’s PCI-validated point-to-point encryption (P2PE) and ShieldConex solutions secure payment data at the POS and online financial, PII and PHI at the point of data entry.


PCI-Validated P2PE

Bluefin’s PCI-validated P2PE solutions encrypt cardholder data at the POS in a PCI-approved P2PE device and decryption is done off-site in an approved Bluefin Hardware Security Module (HSM). Our solution prevents clear-text cardholder data from being present in a merchant or enterprise’s system or network where it could be accessible in the event of a data breach. Our P2PE solutions are available through Bluefin and through our network of Decryptx partners.


Bluefin’s ShieldConex Data Security Solutions Platform

ShieldConex secures the online entry of Personally Identifiable Information (PII), Personal Health Information (PHI), and payment data utilizing our proprietary SAFE™ (Shielded Access Form Element) tokenization and iFrame solutions. The solution is available via online forms or through our API, and supports both Format Preserving Tokenization (FPT) and Format Preserving Encryption (FPE).

Omni-Channel Protection

PAN Data

Cardholder Data

Personally Identifiable Information (PII)

Protected Health Information (PHI)

Payment and Data Security Resources

P2PE White Paper

P2PE in POI Environments: Scope, Cost, Benefits and Implementation

ShieldConex Brief

ShieldConex® Data Privacy Platform

ShieldConex Webinar

Safeguarding Online PII, PHI and Payment Data with Bluefin’s ShieldConex® Privacy Platform