How Agnostic Tokenization Works
FloPay uses the TokenEx transparent gateway to separate your tokens from any single processor.
Customer Enters Data
Card or bank details are entered on a secure hosted checkout page or iframe. Data is encrypted client-side before transmission.
TokenEx Tokenizes
The encrypted data goes to TokenEx, which stores it in a PCI-compliant vault and returns a token. The raw data is never stored by FloPay.
FloPay Routes
FloPay sends the token to your chosen payment gateway via TokenEx's transparent proxy. The gateway processes the payment—FloPay never sees the card.
Token Stored
The token is saved to the customer record for future payments. Use it with any provider—today or in the future—without recollecting card data.
Why Provider-Agnostic Matters
Most payment processors lock your tokens in their vault. FloPay doesn't.
Traditional Tokenization
- Tokens work with one processor only
- Switching providers means re-collecting all card data
- Vendor lock-in limits your negotiating power
- Provider outage means no card-on-file payments
- PCI scope expands with each provider integration
FloPay Agnostic Tokenization
- Tokens work with any supported provider
- Switch providers without touching customers
- Full freedom to negotiate and compare
- Route stored cards to any active provider
- PCI scope stays minimal—TokenEx handles it
What You Can Tokenize
Every payment method your customers use, secured in one vault.
Credit & Debit Cards
Visa, Mastercard, Amex, Discover. Tokenize via hosted checkout, iframe, or API. Store card holder name, last 4, and expiry for reference.
ACH / Bank Accounts
Routing and account numbers tokenized with the same security as cards. Enable bank transfer payments without handling sensitive banking data.
Apple Pay & Google Pay
Wallet payments generate gateway tokens that can be stored for recurring charges. Customers enjoy frictionless checkout from their devices.
Security & Compliance
Enterprise-grade security without the enterprise-grade headache.
- TokenEx PCI DSS Level 1 certified vault
- Client-side encryption before data leaves the browser
- Transparent gateway proxy—tokens swap for real data in transit
- AES-256 encryption for all stored credentials
- 3D Secure (3DS2) authentication support
- HMAC-signed requests to prevent tampering
- No raw card data on FloPay servers, ever
- Stored credential indicators for CIT/MIT compliance
Frequently Asked Questions
-
What is the TokenEx transparent gateway?
TokenEx acts as a proxy between FloPay and your payment processor. When a payment is submitted, TokenEx replaces the token with the real card data in transit and forwards it to the gateway. Neither FloPay nor your servers ever see the raw card number.
-
Can I use my existing tokens from another processor?
FloPay can work with existing TokenEx tokens. If you're migrating from a processor-specific vault, a one-time token migration may be needed. Contact us to discuss your specific situation.
-
Does tokenization affect approval rates?
No. The transparent gateway injects the real card data before it reaches the processor. To the gateway, it looks like a standard transaction. Tokenization is invisible to the payment network.
Contact
Questions about tokenization? We'd love to hear from you.