High Security
We use triple asymmetric RSA encryption in our tokenization hash, so we protect your customers' data against interceptions and leaks.
ELP solutions · Tokenization
Tokenization Guaranteed!
Easily manage your customers' tokens. Store securely, confidentially, and certified your customer's card data to charge your applications and recurrences, with triple encryption RSA asymmetric and compliance PCI DSS in your own instance.
- RSA ×3 in each tokenization hash
- +1.200 TPS per dedicated instance
- 84 ms of average response latency
Tokens issued and collected throughout the region
ColombiaMexicoChilePeruArgentina
EcuadorUruguayGuatemalaCosta RicaPanama
Dominican RepublicBoliviaParaguayHondurasEl Salvador
Discover the APIs of Tokenization
The ones that use thousands of companies
Six reasons why product and treasury teams choose our token vault: bank grade security, real performance, and an integration that your team solves in days.
High Performance
Processing infrastructure with low latency, high approval rates and reliable processing that gives you complete control over your tokens: issue, suspend, rotate or delete.
Simple APIs
Easily connect your Web and Mobile apps for efficient, secure processing. Our APIs handle thousands of transactions per second with no problem.
High Speed
We are connected directly to local processors in most Latin American countries, which gives you unbeatable processing speed.
Money in your accounts
Processed funds always go straight to your accounts. We have integration models that let your company receive the money as early as the next business day after the transaction.
Hands-on support
Our team is ready to meet your requirements — integration engineers included. Get ready to take your business to the next level.
RSA asymmetric ×3
AES-256 at rest
+1.200 TPS by instance
99.95% uptime
PCI DSS Level 1 · audited by QSA
The most powerful service
of Tokenization
We use state-of-the-art data centers to process all your payments. Our instances and services are certified under PCI DSS, which qualifies us as a secure service provider for this service.
- 15+ years of payment processing experience
- We use the latest technology
- Safe and secure system
- Quality support in Spanish and English
- Isolated vault inside your Private Node
- Key rotation and deletion on request (privacy / data-subject rights)
How it works
From card to token, in 4 steps
A token is a mathematical substitute for the card: it is used to collect, it is not used to steal. Thus you see the cycle within your ELP instance.
1
Secure capture
Your customer enters their card in our tokenized field (iframe / web or mobile SDK). The PAN travels encrypted and never touches your server.
2
Token Generation
The vault applies triple RSA asymmetric and returns an irreversible token, with mark, last 4 digits and expiration date.
3
Recovery on any channel
Use the same token for one-click checkout, subscriptions, phone charges or NFC. You control amounts, caps and notices.
4
Liquidation to your account
The money is entered directly into your bank account — even the next business day according to your integration model.
The decision of architecture
Save cards vs. Tokenize with ELP
Storing card numbers in your database makes you a target. Tokenizing with ELP takes you out of the direct audit scope.
| Criteria | Cards in your database | ELP Tokenization |
|---|---|---|
| PAN exposure | Your team and your backups see it. | Invisible: only token + last 4 |
| PCI DSS scope | Maximum, all your infrastructure | Reduced to certified vault |
| Impact of a leak | Card theft and sanctions | A token has no value for the attacker |
| Multi-channel (web, app, IVR, NFC) | Requires development by channel | Same token on all your channels |
| Card expired or reissued | You order the card again. | Automatic Card Updater |
| Compliance cost | Complete audits each year | Level 1 coverage of the ELP instance |
Use cases
Where your customers use their tokens
Everything that requires re-charging without re-ordering the card is solved with the same vault.
One-click checkout
Recurrent purchase in e-commerce with a touch: the conversion goes up and the card form disappears from the funnel.
Subscriptions and memberships
The basis of your recurring collections: each subscriber is tokenized and ready for the monthly cycle.
Mobility and delivery
Post-service payments, tips and tariff adjustments without friction or duplicate charges.
Hotels, travel and reservations
Preauthorizations, extras and damages guaranteed on the same token of the reservation.
Education and health
Pensions, tuition fees and treatment fees collected each period with saved consent.
Marketplaces and split
Token the buyer once and distribute the payment to sellers within your own instance.
Some important questions
Frequently Asked Questions and Answers
These are the questions we receive most from our customers about Tokenization. We try to give you the best information to get started with total confidence.
What exactly is a token?
It is an alphanumeric string that replaces the card number. It serves to charge, but it cannot be reverted to the original card: even if someone leaks your database, a stolen token has no value.
How do you protect your card data?
We apply triple asymmetric RSA encryption to our tokenization hash and AES-256 storage at rest, within dedicated instances audited under PCI DSS Level 1 by our internal QSA.
Is the data left on my server?
No. The PAN travels encrypted from your client's device directly to the vault. Your system only receives and stores token, brand, last 4 digits and expiration.
Can I use the same token on my website, my app and over the phone?
Yes. That is precisely the multi-channel model: the same token enables one-click checkout on the web, in-app payments, phone charges on your IVR and face-to-face sales, with the same consent and the same limits as you define.
Does tokenization replace the client's consent?
No, it supports it. The client authorizes once and we keep that consent with the token, with complete traceability to respond to claims, disputes or legal requirements.
What happens when the customer card expires or is reissued?
We activate the automatic card updater: the bank network informs us of the new validity or the new number and the token is updated by itself, without interrupting the subscription or calling the customer.
How much does it cost and how long do I integrate?
The tokenization service is included in your plan or Private Node — you pay only per transaction, within the same scale ELP. With your credentials in hand, a typical integration takes 3 to 5 business days with support from our technical team.
Can I delete the data of a client who requests it?
Yes. From the panel or by API you revoke and delete the token and its associated consent, leaving proof of erasure for your privacy / data-subject obligations.
One token, four ways to collect
The token is the key; these are the doors.
A single card saved with triple RSA serves you for recurring collection, payment link invoice, collection call, and local contactless collection.
Web Checkout, Links & QR
The payment page with your brand for your virtual store, WhatsApp links or email and QR multi-bank on your counter: cards, PSE, PIX and SPEI in a single integration.
Learn moreAuto Debit & Subscriptions
With the token in hand, the Auto Debit charges the fee month by month with smart retryings, at no additional cost per attempt.
Learn morePayments Portal, Invoicing & AI Accounting
ContiiA invoice, send the payment link and mark the invoice paid: your customer pays with the token card and the income is accounted for.
Learn moreAI Phone Collections
The AI Phone Collections agent charges with the token or receives a new card at IVR and instantly tokenizes it, without the agent seeing it.
Learn moreCharge with your NFC phone · ELP TAP
At the physical point of sale, ELP TAP approaches the client card from your cell phone: same trade, same panel, same reconciliation.
Learn more
Same instance no new integrations
One panel and a single settlement
PCI DSS on all channels
18 countries and +40 payment methods
Contact
Tokenize your collections with ELP
Tell us what channels you use today to collect and let us show you what your tokenized flow would look like, with APIs and integration times. We contact you in less than 24 working hours.
- ✉️
- 💬 Support in Spanish · Mon–Fri, 8:00–18:00 (GMT-5)
- 🪙 Tokenization included in your plan, no license fee
PCI DSS compliance level 1
Insulated vault in your instance, scanned and certified by our QSA.