Portico supports tokenization of account numbers to provide clients with another layer of security. The tokenization process consists of the following two basic steps:

1. Request that an account number (from a PAN or track data) be tokenized and the token be returned to the client POS.
2. The client POS uses the token rather than the PAN or track data in subsequent transactions.

Tokenization provides a means to replace sensitive PAN values with surrogate, non-sensitive values that can be stored and referenced without the complexities of storing and securing PANs, as required by the PCI-DSS. Tokens thus stored can then be passed on supported Portico transactions in lieu of the card number. Heartland's tokenization service manages the association between the token and the PAN.

Multi-use tokenization can be used for Card Present or Card Not Present transactions. Supported services for tokenization are as follows:

Application Service	Request a Token	Use a Token
CreditAccountVerify	Yes	Yes
CreditAuth	Yes	Yes
CreditOfflineAuth	No	Yes
CreditOfflineSale	No	Yes
CreditReturn	No	Yes
CreditReversal	Yes	Yes
CreditSale	Yes	Yes
PrePaidBalanceInquiry	Yes	Yes
RecurringBilling	Yes	Yes
Tokenize	Yes	No

See the message definitions for more information on the token specific fields.

Additional fees apply for the multi-use tokenization service. Please contact your Heartland representative for further information.

• Requesting a Token
• Using a Token
• Managing Tokens