nuBridges and Veritape Partner to Secure Cardholder Information in Call Centres
Integration of leading call recording compliance system with tokenization takes order entry applications out of scope for PCI DSS compliance and audits
BARCELONA, SPAIN — October 19, 2010 — nuBridges announced today at the Payment Card Industry Security Standards Council (PCI SSC) European Community Meeting that Veritape has joined the nuBridges Tokenization Partner Program. Veritape’s CallGuard™ technology, which brings Payment Card Industry Data Security Standard (PCI DSS) compliance to any call recording system, has been integrated with nuBridges Protect™ Token Manager, nuBridges’ industry-leading Format Preserving Tokenization™ solution. This integration allows call centers that use CallGuard to accept credit card numbers over the phone, then instantly tokenize the numbers and insert the tokens into applications to help take order entry and processing applications out of scope for PCI DSS compliance and audits.
CallGuard ensures that recorded telephone conversations are fully compliant with PCI DSS regulations. Compatible with any call recording system, it works by detecting and blocking “DTMF” tones, the sounds produced when keying in a number on a telephone keypad. This prevents the order taker from having any exposure to credit card numbers during an ongoing verbal transaction over the phone. It also prevents storage of the numbers being communicated by the customer. When used in conjunction with nuBridges Protect Token Manager, meaningless surrogate values, called tokens, are substituted for customer credit card numbers during the transaction and placed into the company’s order entry and processing applications. The combination of these technologies provides better protection for cardholders, reduces scope for PCI DSS audits and reduces corporate risk due to security breaches.
“Ever since the launch of the PCI DSS, Veritape has been helping customers to eliminate sensitive cardholder data from recorded calls,” said Cameron Ross, Veritape’s managing director. “This important partnership with nuBridges underscores our joint ongoing commitment to helping contact centers improve data security and customer service. For larger call centers, introduction of this industry-first audio tokenization technology could also have a positive commercial impact in securing them lower charges with their banks, for operating a PCI compliant environment.”
nuBridges Protect Token Manager is part of nuBridges Protect, the industry’s first data security software solution to combine Format Preserving Tokenization with strong local encryption, centralized encryption key management and logging in one platform-agnostic package. nuBridges Protect is designed for organizations that need to protect payment card numbers as well as volumes of personally identifiable information (PII) and protected health information (PHI) from theft and accidental loss, while reducing complexity and simplifying compliance management for data security standards and privacy laws.
“We’re pleased to welcome Veritape as a Tokenization Partner,” said Gary Palgon, nuBridges vice president of Product Management. “Protecting card numbers in audio recordings is an often overlooked area of PCI compliance and this solution will help merchants to comply while limiting PCI audit scope. We’re confident that our joint customers will benefit from the added protection audio tokenization provides.”
About the nuBridges Tokenization Partner Program
The nuBridges Tokenization Partner Program is designed to help third-party vendors re-architect and test their complementary solutions with nuBridges Protect. Participation in the nuBridges Tokenization Partner Program enables software application vendors to help their customers gain an extra layer of data security; reduce PCI audit scope and the initial and annual costs of PCI DSS compliance and audits; and expand beyond payment card number protection to protect any type of sensitive and confidential information. Qualified software vendors are invited to join the nuBridges Tokenization Partner Program.
About Veritape
Veritape’s CallGuard technology brings PCI DSS compliance to any call recording system, by eliminating cardholder data from customer conversations on-the-fly. Truly plug and play, CallGuard does not require integration with existing telephony, recording or IT architecture, and (crucially) doesn’t require any changes to a customer’s payment gateway. CallGuard helps contact center operators eliminate card data theft, and aids customer service, as the conversation between caller and agent is uninterrupted.
Veritape is the only call recording company accredited by the PCI SSC (the ultimate rule-setting body for PCI DSS) as a Participating Organization, and regularly provides specialist advice to banks and PCI industry groups. More information is available at www.veritape.com.
About nuBridges
nuBridges provides technology solutions for extended enterprises that share sensitive data across applications, departments and organizations, and face complex security and compliance mandates. Its data encryption, data tokenization, key management, file transfer and EDI solutions help customers get information from point A to point B; do it safely; and prove compliance. Proven in production, nuBridges software and services readily scale across heterogeneous enterprise environments, including legacy systems, and offer unified visibility for improved analysis, decision support and administrative efficiency. nuBridges solutions and support have established a new standard of quality for the industry, and are trusted by the world’s most demanding organizations to exchange and protect billions of payment card transactions, personal data records and business-critical file transfers. More information is available at www.nubridges.com.
# # #
nuBridges Protect and Format Preserving Tokenization are trademarks of nuBridges, Inc. Veritape CallGuard is a trademark of Veritape Ltd.