What PCI Booking does

PCI Booking is a Dublin-headquartered, privately-held SaaS and payment infrastructure provider that eliminates PCI DSS compliance scope for merchants through tokenization, payment gateway orchestration, and fraud/authentication tooling. Founded within a predecessor online fax business that handled PCI-sensitive data, the company was spun out as a standalone entity in 2018 and is led by founder and CTO Yehuda Alon. PCI Booking serves primarily travel and hospitality merchants (hotels, tour operators, PMS and booking engine providers) alongside SaaS platforms, marketplaces, e-commerce businesses, and telephone-order operations, with operational offices in Ireland (HQ), the United Kingdom (compliance), the United States (sales and support), and Israel (R&D). The company processes more than 500 million cards annually across roughly six million cards per month at peak, with clients on every continent except Antarctica.

The technology stack centers on PCI Shield, a tokenization platform that replaces sensitive card data with mathematically non-reversible tokens and removes merchants from PCI scope entirely. Supporting components include a lightweight JavaScript Payments Library, a Universal Payment Gateway offering single-API access to 100+ payment processors, a Proxy service for on-the-fly tokenization of messages routed to third-party partners, Card By Link for secure telephone-based payments, real-time risk assessment scoring, 3D Secure authentication, and a vault for unlimited card storage. A January 2024 extension called Data Tokenization applies the same vault technology beyond payment data to defend against ransomware. PCI Booking holds PCI DSS Level 1 compliance (maintained since 2012, with v4 compliance achieved in December 2023), ISO 27001:2022 (2025), GDPR, and PSD2 certifications.

Revenue is generated through three streams: subscription-based SaaS fees for PCI compliance outsourcing and tokenization services, transaction-based fees from gateway routing across the Universal Payment Gateway, and usage-based per-SMS charges for the Card By Link telephone-payment product. The go-to-market combines enterprise field sales (dedicated PCI compliance experts, regional offices, 24/7 urgent support) with product-led growth (free sandbox, developer documentation, JavaScript Payments Library). Production pricing is quote-based, calibrated to transaction volume, gateway count, and feature scope. PCI Booking is bootstrapped, with no disclosed external venture or private equity funding, and operates with a lean team of 11-50 employees; its sister brand Orchestra Solutions extends the underlying technology into payment orchestration for industries beyond travel and hospitality.

Name

PCI Booking

Legal name

PCI Booking

Website

https://pcibooking.net

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

11–50 employees

Short description

PCI Booking is a Dublin-based, privately-held SaaS provider that eliminates PCI DSS scope for merchants through tokenization, a 100+ gateway payment orchestrator, and fraud and authentication tools, processing over 500 million cards annually for travel, hospitality, and e-commerce clients.

Ownership category

akta.pro rank

Product category

Payment Security Software

NAICS

Financial Transactions Processing, Reserve, and Clearinghouse Activities (522320)

SIC

Finance Services (6199)

akta.pro primary industry

Tokenization & Secure Payment Vaults (Card-on-File) (FSAMACAC)

akta.pro secondary industries

Merchant Payment Gateways (API/Hosted Checkout) (FSAMACAA), Recurring Billing, Subscriptions & Tokenized Payments (CRAFALAH), POS Certification, Testing & Compliance (EMVCo, PCI PTS/PCI DSS) (FSAMADAL)

Keywords

• PCI compliance services
• Payment tokenization platform
• Payment security infrastructure
• Universal payment gateway
• PCI DSS outsourcing

Headquarters

HQ city

Dublin

HQ country

Ireland

HQ region

Europe

Offices4 records

Markets served

GTM type

B2B

Offering type

Software

Revenue model

1. PCI Compliance SaaS Services: Subscription-based SaaS model providing PCI compliance outsourcing, tokenization, and secure payment processing services. Merchants pay for tokenization and storage capabilities that eliminate their PCI compliance scope.
2. Universal Payment Gateway Processing: Transaction routing through integrated payment gateways. Merchants can optimize transaction costs by choosing most cost-effective gateway per transaction based on location, currency, and transaction type.
3. Card By Link SMS: Additional per-SMS charges for card capture pages delivered via SMS for telephone payment scenarios, with pricing varying by country.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels5 records

Core offering

PCI Booking provides a cloud-based PCI compliance and payment security platform, anchored by its PCI Shield product, that replaces sensitive cardholder data with non-reversible tokens so merchants are removed from PCI DSS scope entirely. It also offers a Universal Payment Gateway that connects merchants to 100+ payment processors via a single API, along with secure card capture forms, proxy-based tokenization, telephone payment links, 3D Secure, risk scoring, and extended data tokenization for non-payment files.

Product overview

PCI Booking offers a unified PCI compliance platform centered on PCI Shield, designed to eliminate payment card data from merchant systems and remove businesses from PCI DSS scope. The product portfolio includes core tokenization and vault storage services, supplemented by multiple integration methods (embedded card forms, proxy services, JavaScript library, phone payments via Card By Link), authentication tools (3D Secure, Risk Assessment), and the Universal Payment Gateway for multi-processor payment processing. The platform processes over 500 million cards annually and serves primarily the travel and hospitality industries, with a sister brand called Orchestra extending the technology to other sectors.

Differentiator

Problem solved

Functional benefit

Brands

• PCI Shield: A PCI compliance solution that protects payment information by ensuring it is secured with the highest level of PCI compliance. Allows businesses to completely remove all payment card data from their systems, resulting in being taken out of PCI compliance scope entirely.
• Orchestra Solutions

Products and services

• PCI Shield Primary PCI compliance platform that captures, tokenizes, stores, and manages credit card data through secure hosted forms, proxy services, and vault storage so merchants are removed from PCI DSS scope.
• Payments Library

Quantifiable outcome

• PCI compliance scope elimination - merchants are removed from PCI DSS requirements entirely by outsourcing card handling
• +2 more outcomes

Segments5 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration32 records

Feature9 records

Partnerships

Five partnerships are on record, tiered core.

• NetscoreTechnology or IntegrationIntegration with Nets payment solutions for European commerce. PCI Booking connects to Nets gateway allowing merchants to route transactions and tokenize cards through a single integration.
• StripecoreTechnology or IntegrationIntegration with Stripe payment platform. Merchants can use PCI Booking to tokenize and store cards outside Stripe system while maintaining flexibility to process through Stripe or other gateways.
• WorldpaycoreTechnology or IntegrationIntegration with Worldpay payment technology. PCI Booking enables merchants to route through Worldpay gateway with simplified single-integration approach.
• AdyencoreTechnology or IntegrationIntegration with Adyen global payment platform. Supports merchants requiring access to Adyen's extensive global payment network through PCI Booking's unified API.
• Orchestra SolutionscoreStrategic or Co-development PartnerSister brand extending underlying PCI Booking technology to other industries and use cases beyond travel and hospitality. Shares same technology infrastructure for payment orchestration.

Scale indicators5 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• Spreedly: Spreedly is a payments orchestrator offering a vault-agnostic platform for tokenizing card data and routing across 100+ payment gateways. Directly comparable to PCI Booking's Universal Payment Gateway and Tokenization & Detokenization products, serving a similar mid-market and enterprise merchant base.
• TokenEx: TokenEx (now part of Visa) is a cloud tokenization platform that detaches sensitive payment data from merchant environments, virtually identical in architecture and value proposition to PCI Booking's PCI Shield and Storage & Management vault. Targets the same PCI-scope-elimination buyer.
• Basis Theory: Basis Theory provides a tokenization platform with a developer-friendly vault and proxy layer for sensitive data, including payment cards. Competes head-on with PCI Booking's Proxy and tokenization features, especially for SaaS platforms and marketplaces building PCI-compliant flows.
• Gr4vy: Gr4vy is a payment orchestration platform providing a no-code cloud-based routing layer across many gateways. Closely comparable to PCI Booking's Universal Payment Gateway, with overlapping customer base in travel, marketplaces, and enterprise e-commerce.
• Very Good Security (VGS): VGS operates a data security and tokenization platform that protects sensitive data (payments and beyond) via a vault-and-proxy architecture. Directly comparable to PCI Booking's PCI Shield, Storage, and Proxy stack, with similar Data Tokenization adjacency.
• CellPoint Digital: CellPoint Digital provides payment orchestration and optimization specifically for the travel and hospitality industry. Closely comparable to PCI Booking in target vertical (travel), offering multi-gateway routing and card vaulting solutions to airlines, hotels, and booking platforms.

Broad incumbents

• Stripe: Stripe is a global payments incumbent offering Stripe Elements, network tokens, and PCI-compliant hosted fields as part of its broader processing stack. While Stripe provides adjacent tokenization, merchants seeking processor neutrality use PCI Booking or Spreedly instead — making Stripe both a partner and competitor.
• Adyen: Adyen is a global payments platform with native network tokenization (network token optimization) and PCI scope reduction capabilities. Competes indirectly with PCI Booking on the tokenization axis, though enterprise merchants sometimes pair PCI Booking's Universal Gateway with Adyen routing.
• Checkout.com: Checkout.com is a global payment processor serving large enterprises with optimized routing and integrated tokenization. Overlaps with PCI Booking in the Universal Payment Gateway space and competes for the same travel and marketplace merchants.

Emerging players

• Payrails: Payrails is an emerging payment orchestration platform with built-in tokenization and workflow tools targeting enterprise merchants. Comparable to PCI Booking's Universal Payment Gateway in functionality, with stronger workflow/orchestration emphasis and a newer market presence.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/pci-booking
• Xx.com/pcibooking

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about PCI Booking