Cartão Protegido (card vault)

Cartão Protegido is a platform that enables secure storage of credit and debit cards. Braspag is PCI Security Standards Council compliant, which ensures that Braspag enironment fully follows the strict requirements and standards determined by PCI.

Cartão Protegido is compatible with Braspag's Pagador Gateway, facilitating the processing of credit and debit card transactions via token.

Main benefits

  • Renova Fácil*: for recurrent payments, any update to the card number that has been blocked or canceled by the issuer is automatically informed to the Gateway API, which in turn associates the new card with the existing token. Then, the Gateway API will inform the merchant the new card data, and the merchant will be able to inform the new card data for the next recurrent transactions. Please refer to Renova Facil for more information.

  • Higher conversion rate*: tokenized transactions processed at Braspag via Pagador may result in a higher than average market conversion rate. This is because card brand tokenized cards improve security in the process, so issuers tend to approve the transaction more easily. Cartão Protegido is available for Visa and Mastercard cards processing via Cielo 3.0.

  • PCI DSS Secure Environment: Braspag has a PCI DSS certified environment, which ensures the integrity and security of sensitive data such as credit card data.

  • Valid card use guaranteed*: Cartão Protegido will only accept saving cards that pass the Luhn Algorithm check, also known as "mod10". This will give you greater security and certainty that saved cards have the least validation of their veracity.

*Check availability and enable the feature with Braspag Support.

Use Cases

The purpose of the platform is to help merchants in several use cases, including:

  • Scheduled Recurring Payments: merchants that already have an internal recurrence management solution can use the platform to store credit card data and process through payment tokens. Example: Subscription Services.

  • Unscheduled Recurring Payments: merchants that charge their registered customers, but without a defined periodicity. Example: car ride services apps.

  • One Click Payment: allows an online credit card payment to be completed by skipping the step of filling in payment details or even the entire payment process. Card details previously informed by the shopper on past purchases will be replicated on future purchases upon their authorization.

  • Sales Recovery: merchants can contact customers who may have had problems during the purchase, offering a new billing attempt.


Transaction flow

You can integrate with Cartão Protegido with one of the options:

  1. Simouteneously to the authorization process, through Pagador API. Check [Pagador documentation] for more information.
  2. Before the authorization (sale), sending a tokenization request direct to Cartão Protegido API.

Check the transactional flow representation for when the tokenization is requested directly to Cartão Protegido API:


Please, also refer to using VerifyCard with Cartão Protegido.