Card data scope reduction (tokenisation, P2PE-style)

Elements

The pieces this function usually contains in a large organisation:

• Card entry only on certified terminals
• No card numbers stored
• Token references only

Catalog items that already cover part of it

• PCI scope minimization SEC-0039
• No card number entry or OCR PAY-0014
• Card (external terminal) record PAY-0010

Classification

Status

Present in catalog

Fit

Core candidate

Suggested module

PAY: Payment Methods & Tap to Pay

Suggested attributes

Lite and Pro; priority Standard; always offline. Starting points only.

Cluster

Loss prevention, security and risk

Public excerpts

domain analysis

Archetypes and companies

Big-box, warehouse club and mass merchants; Supermarket and grocery chains; Quick-service, coffee and franchised restaurants; Online marketplaces and subscription commerce; Banks and credit unions.

Example companies in these archetypes: Walmart, Costco, Target, Sam's Club, BJ's Wholesale Club, Meijer, Kroger, Albertsons, Publix, Ahold Delhaize USA, H-E-B, Whole Foods Market. These come from general knowledge unless a source code is shown on the archetype page; it is not a statement that each company runs every element, and it implies no relationship.

Closest industry pages

• General merchandise and big-box stores
• Grocery and supermarkets
• Quick-service and fast casual
• Cafes, coffee shops and bakeries
• E-commerce and omnichannel retail
• Banking, credit unions and cooperative banks
• Payments, remittance and money services
• Securities, asset management and diversified financials
• Savings groups, cooperatives and microfinance

Previous: Role-based permissions and manager approvals. Next: Secrets, keys and device trust.

Status is a hand review against catalog names and descriptions and can be wrong. See the method.