Bluefin
Bluefin provides PCI-validated point-to-point encryption, vaultless tokenization, and payment orchestration to 40,000 merchants, ISVs, processors, and SaaS platforms across 60 countries through a 300+ partner channel.
- Company typePrivate
- Founded2007
- HeadquartersAtlanta, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Bluefin does
Bluefin Payment Systems is an Atlanta-based, privately held data security infrastructure provider founded in 2007 that specializes in PCI-validated Point-to-Point Encryption (P2PE), vaultless tokenization, and payment orchestration for merchants, independent software vendors (ISVs), payment processors, gateways, and SaaS platforms. Its portfolio is anchored by ShieldConex Orchestration (a unified tokenization, encryption, and proxy-layer platform), PointConex (card-present orchestration enabling processor-agnostic P2PE), Decryptx (P2PE-as-a-Service), ShieldConex Tokenization (vaultless, format-preserving tokenization for payments, PII, and PHI), PayConex (domestic gateway) and the TECS Global Gateway (international gateway-as-a-service). Supporting products include BluePOS (a payment application for Android-based PAX terminals), QuickSwipe (mobile payments), P2PE Manager (the only online Chain of Custody system), and 3D Secure authentication. The platform supports 125+ certified P2PE devices from manufacturers including Verifone, Ingenico, PAX, Newland, and BBPOS, and integrates with 100+ gateways, processors, and SaaS platforms.
The company reports 40,000 customers across 60 countries, $350 billion in protected annual card sales, and 3.5 billion+ data records secured, operating through a hybrid go-to-market that combines direct enterprise sales (101–250 employees, headquartered at 8200 Roberts Dr, Atlanta), a self-serve Developer Hub with APIs/SDKs/sandbox, Salesforce AppExchange distribution, and a 300+ partner channel of resellers, white-label platforms, and integrators. Revenue is generated through recurring P2PE/tokenization subscriptions, transaction fees on payment volume processed through PayConex and TECS Global Gateway, and enterprise quote-based contracts (typically multi-year). The company holds 49 patents, maintains ISO/IEC 27001:2022 and SOC certifications, and has been recognized with the 2025 CyberSecurity Breakthrough 'Data Protection Solution of the Year' award for ShieldConex Orchestration.
Bluefin is led by CEO John Perry and founder Ruston Miles, with a leadership team including a Chief Revenue Officer, CISO, CTO, CFO, Chief Innovation Officer, and an SVP for Europe — signaling continued international buildout post the 2022 acquisition of TECS Payment Systems. Capital structure includes prior equity raises from Goldman Sachs (2014), Camden Partners and Napier Park Global Capital (2016, $6M), and Macquarie Capital (2020, $25M). The company has no disclosed parent and appears to be founder/management-controlled. Customer concentration is spread across higher education, healthcare, retail, petroleum/convenience stores, government/utilities, insurance, and SaaS/ISV verticals.
Bluefin firmographics
Firmographics- Name
- Bluefin
- Legal name
- Bluefin Payment Systems LLC
- Website
- https://Bluefin.com
- Company type
- Private
- Founded year
- 2007
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Bluefin provides PCI-validated point-to-point encryption, vaultless tokenization, and payment orchestration to 40,000 merchants, ISVs, processors, and SaaS platforms across 60 countries through a 300+ partner channel.
- Ownership category
- akta.pro rank
Bluefin industry classification
Industry- Product category
- Payment Security Software
- NAICS
- Financial Transactions Processing, Reserve, and Clearinghouse Activities (522320)
- SIC
- Finance Services (6199)
- akta.pro primary industry
- Tokenization, Network Vaults & Credential Management (FSAGABAF)
Keywords
Where Bluefin is headquartered
LocationHeadquarters
- HQ city
- Atlanta
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Bluefin business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- P2PE and Tokenization Services: Bluefin generates recurring revenue through PCI-validated Point-to-Point Encryption (P2PE) and vaultless tokenization services embedded across partner platforms. These services are sold to merchants, ISVs, gateways, and processors who integrate Bluefin's security infrastructure to reduce their PCI DSS compliance scope. Revenue is driven by transaction volume, device licensing, and platform subscription fees for orchestration and management portals.
- Payment Gateway Services: Bluefin operates PayConex, a domestic and global payment gateway, providing transaction processing services for merchants across multiple geographies. Revenue is generated through transaction fees tied to payment volume processed through the gateway platform.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Quote-based enterprise pricing tailored to transaction volume, device count, and platform integration scope. |
Go-to-market motion2 records
Distribution channels5 records
Marketing channels7 records
Bluefin product offering
Product offeringCore offering
Bluefin is a data security infrastructure provider that protects sensitive payment, PII, and PHI data in motion using PCI-validated Point-to-Point Encryption (P2PE), vaultless tokenization, and payment orchestration. Its vendor-agnostic platform is embedded across 100+ gateways/processors, 125+ certified P2PE devices, and 300+ partners, enabling merchants, ISVs, processors, and gateways to reduce PCI DSS scope without replacing existing payment infrastructure.
Product overview
Bluefin is a data security infrastructure provider offering a unified platform approach to payment and data security. The core portfolio centers on ShieldConex Orchestration as the main orchestration layer, supported by PointConex for card-present environments, Decryptx (P2PE as a Service) for point-to-point encryption, and ShieldConex Tokenization for vaultless tokenization. The company also operates PayConex Gateway for domestic payments and TECS Global Gateway for international transactions. Additional products include BluePOS payment application for Android terminals, QuickSwipe for mobile payments, P2PE Manager for device management, and 3D Secure for online payment authentication. The solution secures sensitive data in motion using PCI-validated P2PE, tokenization, and orchestration across platforms, processors, and systems, serving 40,000+ customers in 60 countries through 300+ partners.
Differentiator
Problem solved
Functional benefit
Brands
- ShieldConex: Payment orchestration platform
- PointConex
- Decryptx
- ShieldConex Tokenization
- BluePOS
- PayConex Gateway
- QuickSwipe
- P2PE Manager
Products and services
- ShieldConex Orchestration Payment orchestration platform that combines encryption, tokenization, and proxy-layer controls to secure data across every channel and transaction environment for merchants, ISVs, gateways, and processors.
- PointConex
Quantifiable outcome
- Reduces PCI DSS compliance scope for merchants and ISVs by securing data at the point of entry before it enters the merchant's environment.
- +4 more outcomes
Companies that use Bluefin
Customer profileNamed customers3 records
Segments7 records
Ideal customer profiles6 records
Bluefin technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration6 records
Feature8 records
Bluefin partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered core and minor.
- LANDI GlobalcoreBluefin and LANDI Global partnered to deliver a direct-to-processor Point-to-Point Encryption (P2PE) solution for LANDI's Android-based smart payment terminals. The joint solution combines LANDI's smart terminals with Bluefin's PointConex platform, enabling processor-agnostic, PCI-validated P2PE without requiring merchants, ISVs, gateways, or processors to redesign existing payment flows or undergo extensive EMV recertification. Addresses growing security demands across distributed devices in retail, hospitality, petroleum, healthcare, and enterprise sectors.
- Agile Ticketing SolutionscoreBluefin expanded its partnership with Agile Ticketing Solutions, under which Agile adopted Bluefin's BluePOS payment application and PAX A35 Android payment devices for secure ticketing experiences at entertainment and campus venues. The expanded partnership builds on a relationship established in 2018 and enables venues to use PCI-validated point-to-point encryption to secure payment transactions. Supports Agile's growth in higher education and entertainment venue markets.
- Volante SystemscoreBluefin expanded its partnership with Volante Systems to provide enhanced PCI-validated point-to-point encryption (P2PE) capabilities for enterprise foodservice payment processing. As part of the expansion, Volante added support for the PAX A35 Android payment device supporting EMV, NFC, magstripe, and QR code payments. The partnership, which began in 2021, enables enterprise foodservice organizations to reduce PCI scope while maintaining secure, flexible checkout experiences across hundreds of locations.
- AccrueminorBluefin partnered with Accrue, a fintech company specializing in branded stored-value wallets and loyalty platforms. Under the collaboration, Bluefin provides its security-first payment infrastructure—including gateway, ACH, and check solutions—while Accrue offers its embeddable wallet and loyalty platform to clients across retail, grocery, and education sectors. The partnership aims to help organizations reduce payment costs, drive customer engagement, and consolidate vendors.
- Basis TheorycoreBluefin and Basis Theory partnered to enable unified tokenization across omnichannel payment environments, combining Bluefin's PointConex platform with Basis Theory's API-driven tokenization capabilities. The partnership allows enterprises to implement a unified token strategy across in-store, call center, online, and backend payment environments without expanding PCI scope or introducing new integration complexity. Bluefin serves 40,000 clients in 60 countries through 300+ partners, while Basis Theory was founded in 2020 and is backed by Costanoa, Bessemer Venture Partners, and Kindred Ventures.
- AlacriticoreBluefin partnered with Alacriti, a provider of cloud-based payments and money movement services, to integrate Bluefin's PCI-validated point-to-point encryption solution with Alacriti's Orbipay EBPP billing and payments platform. The collaboration enables banks, credit unions, and insurers to offer secure in-person payment experiences, reducing PCI compliance scope and costs while providing enterprise-grade security through certified devices and simplified attestation processes.
- TECS Payment SystemscoreBluefin acquired TECS Payment Systems, an omnichannel payment solutions provider, expanding its geographical footprint and enhancing its payment processing and data security capabilities. TECS operates as a subsidiary offering a Global Gateway as a Platform-as-a-Service.
Scale indicators8 records
Recent moves6 records
Expansion highlights5 records
Bluefin competitors and assessment
Company assessmentDirect peers
- Futurex: Provider of payment HSMs, key management, and P2PE infrastructure used by payment processors and financial institutions. Comparable to Bluefin's P2PE Manager and key-management capabilities, with deeper specialization in hardware root-of-trust.
- Basis Theory: API-driven tokenization platform enabling unified token strategy across payment environments. Directly comparable to Bluefin's ShieldConex — and notably a 2026 strategic partner of Bluefin, suggesting both collaboration and competitive overlap in omnichannel tokenization.
- Voltage (by Token): Payment data security and tokenization provider serving merchants and payment processors with format-preserving encryption. Comparable to Bluefin's tokenization and P2PE capabilities, particularly for processors and large merchants.
- Shift4 Payments: Public payments platform offering integrated payment processing with P2PE and tokenization capabilities. Comparable to Bluefin because it serves merchants across hospitality, retail, and restaurants with end-to-end payment security, though at significantly larger scale.
- Protegrity: Enterprise data tokenization and discovery platform protecting PII, PHI, and payment data across hybrid environments. Comparable to Bluefin's ShieldConex tokenization, with overlap in healthcare, financial services, and retail verticals.
- Skyflow: API-first data privacy vault offering tokenization, encryption, and vaulting for PII, PHI, and payment data. Comparable to ShieldConex as a developer-friendly tokenization-as-a-service platform targeting SaaS, healthcare, and fintech customers.
Broad incumbents
- Trustwave: Cybersecurity and PCI compliance services provider including payment data security and tokenization for merchants. Comparable to Bluefin's compliance-driven security value proposition, particularly for mid-market and enterprise customers seeking managed PCI services.
- Verifone: Global payment terminal manufacturer that acquired TokenEx and offers its own tokenization and P2PE solutions. Comparable to Bluefin as a partner-competitor serving the same merchants, but operates across the full hardware-software payments stack.
- Ingenico (Worldline): Major payment terminal manufacturer (now part of Worldline) offering its own P2PE and tokenization across an installed device base. Comparable to Bluefin through the 125+ certified device ecosystem and as a payments-security infrastructure provider.
- Thales (Payment HSM): Global digital security company providing payment HSMs, encryption, and tokenization infrastructure to banks and payment networks. Comparable to Bluefin's underlying encryption/key-management stack, though at vastly greater scale and across broader security categories.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Bluefin social profiles
Digital presenceBluefin compliance and trust
Trust signalCompliance3 records
Bluefin financial estimates
Financial estimateRevenue estimate
Valuation estimate
Bluefin leadership team
Management profileNumber of profiles
Profiles9 records
Bluefin subsidiaries and ownership
Company hierarchySubsidiaries1 record
Bluefin funding detail
Funding detailFunding overview
Funding rounds3 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Bluefin M&A and investment
M&A and investmentM&A1 record
Investments1 record
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Bluefin
What does Bluefin do?
Bluefin is a data security infrastructure provider that protects sensitive payment, PII, and PHI data in motion using PCI-validated Point-to-Point Encryption (P2PE), vaultless tokenization, and payment orchestration. Its vendor-agnostic platform is embedded across 100+ gateways/processors, 125+ certified P2PE devices, and 300+ partners, enabling merchants, ISVs, processors, and gateways to reduce PCI DSS scope without replacing existing payment infrastructure.
Is Bluefin a public or private company?
Bluefin is a private company. It is classified as venture growth investor backed and is currently operating.
When was Bluefin founded?
Bluefin was founded in 2007. It employs 1 to 10 people.
Where is Bluefin based?
Bluefin is headquartered in Atlanta, United States, in the North America region.
How does Bluefin make money?
Two revenue lines are on record. P2PE and Tokenization Services are the primary driver. The others are payment Gateway Services.
Who are Bluefin's main competitors?
Direct peers on record are Futurex, Basis Theory, Voltage (by Token), Shift4 Payments, Protegrity and Skyflow. Broad incumbents are Trustwave, Verifone, Ingenico (Worldline) and Thales (Payment HSM).
Does Bluefin have an API?
Yes. Bluefin offers a public API and developer portal (Developers.bluefin.com) providing APIs, SDKs, guides, and documentation for integration. A sandbox environment is available for testing. Supports 100+ gateways, processors, and SaaS platforms with 120+ certified P2PE devices. Developer documentation is at developers.bluefin.com.
What industry is Bluefin in?
Bluefin's product category is Payment Security Software. Its primary akta.pro industry code is FSAGABAF, Tokenization, Network Vaults & Credential Management. Its NAICS code is 522320 and its SIC code is 6199.