PCI-Validated Point-to-Point Encryption | P2PE

Encryption to Protect POS Credit Card Payments

A Leading Provider of PCI-validated P2PE Solutions


In 2014, Bluefin became the first provider of a PCI-validated point-to-point encryption (P2PE) solution in North America. Today, their P2PE solutions span our product suite and are offered by 110+ processors, gateways and ISV’s operating in over 30 countries. Their solutions encrypt payment data immediately upon swipe, dip or tap in the P2PE certified device, with encryption being done outside of the merchant environment by Bluefin. P2PE ensures that no clear-text cardholder data is available in the event of a data breach.  Face2facepay have partnered with Bluefin to provide their products into the European market.


Decryptx / DaaS Solution

Decryptx enables processors and payment gateways to directly connect to  a PCI-validated P2PE solution through a simple API. Partners get the benefit of reducing PCI scope and cost for merchants without the need to become a PCI P2PE listed provider themselves. In addition to being the gold standard in POS payment security, P2PE can also provide a new revenue stream and differentiator for your merchants.


ShieldConex Data Security Platform

The ShieldConex platform is available via an API for processors and payment gateways that wish to secure sensitive data entered online. ShieldConex utilizes Bluefin’s proprietary SAFE™ (Shielded Access Form Element) tokenization and iFrame solutions to protect Personally Identifiable Information (PII), Personal Health Information (PHI), and payment data entered on a website – regardless of processing or integration relationships.


P2PE Manager

The P2PE Manager is the industry’s only PCI validated 100% online system that offers merchants an easy-to-use tool to administer their P2PE activities and ensure PCI P2PE compliance. The Manager monitors the complete lifecycle of a payment device, including key injection, device shipping, users, device state, attestation management, and a record of every decryption performed by every device. Processors and payment gateways with their own P2PE solution can license the Manager for the administration of their customers’ P2PE activities.  This product can also be white labeled and branded by the merchant.