Aer Lingus

As an airline that’s been in business for nearly 100 years, Aer Lingus is no stranger to payments. Payments Product Manager Fabien Mollinari states, “We started in 1936, so processing payments has been important for us since day one.”

Their payment processing technology continued to evolve, with the airline enabling payments on its website in the early 2000s. However, as the business grew, it realized the need to replace its systems to meet the Payment Card Industry Data Security Standards (PCI DSS). “As the demands on our payment systems increased, we felt it was important to increase security around our transactions.”

However, there were instances where the Aer Lingus team needed to access payment information, such as for security or customer service reasons. Ultimately, they needed a solution to balance the needs of the business with the need for improved security and compliance.

Aer Lingus turned to IXOPAY to securely collect and tokenize payment data on its website and mobile app. Using IXOPAY kept sensitive credit card data out of Aer Lingus’ systems, helping them to gain PCI compliance and reducing the risks associated with storing sensitive data.

“IXOPAY brings greater security to our business and allows us to protect our customers data”, Mollinari says.

Another benefit of IXOPAY is that Aer Lingus still has access to the payment card’s first six and last four digits. This gives internal teams enough information about the card for security and customer service issues without exposing the entire card number.

“The token allows us to do our research without needing to see the whole card number”, Mollinari explains.

Aer Lingus uses IXOPAY's hosted iFrame and Mobile API to securely collect payment information on its website and mobile app. This payment information is sent directly to IXOPAY.

IXOPAY stores the data and returns a non-sensitive token to Aer Lingus. This ensures that payment information never enters their internal systems, drastically reducing their PCI scope.

When Aer Lingus needs to charge a customer, they send the token for that customer to IXOPAY. IXOPAY detokenizes the payment information and sends it to their payment processor through IXOPAY's Transparent Gateway.