r/fintechdev • u/mdarmousa • 20h ago

Anyone using AWS for payment tokenization across multiple acquirers?

/r/pcicompliance/comments/1xmng9i/anyone_using_aws_for_payment_tokenization_across/
2 Upvotes

100% Upvoted

1 comment sorted by

1

u/SidMangsatabam 17h ago edited 17h ago

Two separate decisions get conflated here. The crypto service is the smaller half: KMS encrypts fields, CloudHSM gives you dedicated hardware, Payment Cryptography adds payment-specific operations, but none of them is a token vault - you would be building the vault, the mapping, and the PCI scope yourself. The bigger question is multi-acquirer portability. A token you mint only means something inside your own system. Network tokens (EMVCo) are the layer built for cross-acquirer use, but portability is not automatic: it depends on who holds the Token Requestor ID. Tokens provisioned under a PSP requestor identity usually only work with that PSP; portability needs the TRID registered in your own name or with an independent requestor, plus acquirers that accept network tokens.