Token Vault
Store payment details once. Use them everywhere.
Everpay replaces card and bank account numbers with tokens, keeps the originals in an isolated vault, and lets you reuse a token across processors, subscriptions and future payments.
Why tokenize payment data
Storing raw card numbers puts your business at risk of a breach, widens your PCI DSS scope, and makes it hard to move between processors. Stored details also go out of date, so recurring payments fail when a card expires or is reissued.
Tokenization separates the sensitive data from the systems that use it. Your code works with tokens, and the data stays in a controlled vault.
How the vault works
Step 1
Capture
Card or bank details are entered into hosted fields, so the raw numbers are sent straight to the vault and never sit in your forms or logs.
Step 2
Store
The vault keeps the sensitive data in an isolated, encrypted store with restricted access and audit trails.
Step 3
Tokenize
Your systems receive a token in place of the number. The token can be saved against a customer, an order or a subscription.
Step 4
Use
When you charge, Everpay sends the token to the right processor. Your code never handles the underlying number.
Reuse across processors and subscriptions
A token is an alias for a stored payment method. It is not tied to one provider, so it works across your payment setup.
- Reuse one stored payment method across processors, so you can add or switch providers without asking customers to re-enter details
- Run subscriptions and recurring billing from the same token, with no card data kept in your database
- Keep saved cards current with account updater services, so fewer payments fail on expired or reissued cards
- Reduce PCI DSS scope, because your systems handle tokens rather than card numbers. Compliance responsibilities still apply to your integration
- Use network tokens where supported, which can lower declines and fraud compared with raw card numbers
Use cases
Subscriptions and memberships
Bill customers every month from a saved token, and update it automatically when a card is reissued.
Marketplaces and platforms
Store payment methods for buyers and sellers once, and route payouts and charges through the right provider.
Ecommerce and checkout
Offer one-click repeat purchases without storing card numbers in your own database.
Card programs
Tokenized card data keeps issued cards and linked accounts out of your systems.
Frequently asked questions
- Does Everpay store card numbers?
- Card numbers are kept in the vault. Your systems hold tokens, which are useless outside your account.
- Can I use a saved token with another processor?
- Yes, through routing rules and the processor connections we support. Ask our team which providers work for your markets.
- What happens when a card expires or is reissued?
- Account updater services can refresh stored card details, so recurring payments continue without customer action.
- Does tokenization remove my PCI obligations?
- It reduces the scope of your PCI DSS assessment, but you remain responsible for how your integration handles payment data.