Bluefin, a leader in payment and data security with PCI-validated point-to-point encryption, has formed a strategic partnership with Basis Theory, a modern API-driven tokenization and vaulting platform. This collaboration bridges digital-first tokenization with certified in-person payment environments, creating a unified token strategy for hybrid and omnichannel commerce.
Organizations adopting hybrid payment models often encounter challenges aligning digital tokenization solutions with secure in-person payment systems. This partnership resolves that by combining Bluefin’s PointConex orchestration with Basis Theory’s tokenization capabilities, allowing sensitive payment data to be captured, tokenized, and utilized securely across all channels.
PointConex functions as a no-code proxy rather than a traditional gateway, enabling digital-first providers to access certified in-person payment rails without disrupting workflows or expanding PCI scope. It supports a wide range of certified devices and remains processor-agnostic for maximum flexibility.
Basis Theory’s platform delivers modern, API-first tokenization and vaulting, empowering merchants and platforms to control sensitive payment data independently while meeting PCI Level 1 and SOC 2 standards.
“As organizations expand into hybrid payment experiences, PointConex provides a standardized way to secure in-person payment rails without adding new compliance or integration complexity,” said Ruston Miles, Founder and Chief Strategy Officer of Bluefin. “By aligning with modern, independent tokenization platforms like Basis Theory, we enable a consistent approach to protecting payment data across all channels while preserving flexibility and data ownership.”
“Our partnership helps merchants connect customer spending data across in-store and online channels,” said Colin Luce, Co-Founder and CEO of Basis Theory. “Merchants gain a more consistent checkout experience, wherever customers choose to pay, while maintaining strong security and flexibility across their payment environments.”
The combined solution supports enterprises pursuing PCI Level 1 security infrastructure, reduced vendor dependency, and data ownership in an omnichannel landscape. It future-proofs payment workflows by enabling seamless token reuse, consistent customer experiences, and simplified compliance across digital and physical touchpoints.
About Bluefin
Bluefin is recognized worldwide for building leading-edge, security-first payment and data infrastructure, anchored by PCI-validated point-to-point encryption (P2PE), vaultless tokenization, and advanced orchestration capabilities. Bluefin’s product suite includes both integrated and vendor-agnostic solutions, enabling enterprises, organizations, and SaaS platforms to secure sensitive data with business flexibility. Bluefin works with 300+ partners to serve 40,000 clients in 60 countries, securing over 3.5 billion pieces of data annually and supporting more than $350 billion in payment volume each year. Bluefin is headquartered in Atlanta with offices in Waterford, Ireland, and Vienna, Austria, and is a Principal Participating Organization of the PCI Security Standards Council (SSC).
About Basis Theory
Basis Theory is the leading independent payment vault, built to help merchants and platforms secure, control, and utilize sensitive payment data across systems and partners. With PCI Level 1 compliance, SOC 2 certification, and a developer-first API, Basis Theory empowers customers to design their payment infrastructure however they choose with zero lock-in. Founded in 2020, the company is backed by Costanoa, Bessemer Venture Partners, Kindred Ventures, and others.