Card Tokenisation (CoF)

Replacing a stored card number with a network-issued token, mandated by the RBI for card-on-file storage so merchants never retain the real PAN.

What it changes for you

Saved-card checkout still works, but the stored value is a token usable only by you. A breach of your database yields nothing reusable elsewhere, and your PCI DSS scope shrinks substantially.

The migration trap

Tokens are issued per merchant per network, so a merchant switching providers can lose saved cards and the repeat-purchase conversion that came with them. Check token portability before you migrate, not after.

Related terms

Payment Orchestration

Where this applies

StancorPay

Need help applying this?

Stancor Technologies engineers answer specification questions directly. Contact us.