Keys and EMV cryptography
Card key derivation, CVV and PVV generation, and EMV cryptogram validation at authorisation time — every operation executed inside FIPS 140-2 Level 3 certified payment HSMs, with keys segregated per issuer.
EMV cryptography
M-EMVThe chip’s cryptographic primitives, executed inside certified payment HSMs. Available on its own.
ARQC and ARPC
Chip application cryptogram validation and issuer response generation at authorisation time.
PIN and PIN translation
PIN validation with PVV, static and dynamic CVV, and native PIN translation for fleet scenarios (card in the vehicle, driver’s PIN) and corporate expense (one card, many employees).
Data Preparation
Automated assembly and delivery of personalisation files to the bureau chosen by the issuer, with keys protected by KEK end to end. Direct integration, with no manual handling of sensitive material.
Multi-product cards
Multiple payment products on the same physical card — benefits, fleet, corporate — each with its own AID, PAN, profile and keys, and per-product block and unblock after issuance.
Dynamic CVV
Virtual cards with a code that renews on every use or expires in minutes, for online purchases.
Where this connects
Technical material →You keep what already works
Your BIN, your authoriser and your transaction flow stay yours. The CaaS enters as an API call inside the flow you already run: where the cryptographic primitive is missing today, an answer appears. This is not handing your operation to a third party — it fills the gap without touching the rest.
Lower cost of change
No database migration, no platform swap, no integration rewrite. What changes is where one answer comes from inside the flow, not the flow itself.
Faster to deploy
No infrastructure project, no HSM procurement, no secure perimeter to build and certify. The timeline becomes integration, not construction.
Transparent process
Every call is traceable, with per-issuer metrics and audit trail. You see what the service does, when it does it, and how fast.
UNCHANGED — Card core and customer records, authoriser, fraud tooling, portals and channels, personalisation bureau and your databases stay exactly as they are.