IXOPAY

IXOPAY provides payment tokenization and orchestration: it replaces raw cardholder data with non-sensitive tokens at the point of capture, so that sensitive payment data never touches a merchant’s own systems, while also giving merchants a single integration layer to route transactions across multiple payment processors and acquiring banks. The combination matters because tokenization alone reduces PCI DSS scope but locks a merchant into whichever processor issued the token; pairing it with orchestration lets a merchant keep that reduced scope while still shopping transactions across providers for cost, redundancy, or geographic coverage.

The company in its current form is the result of an April 2024 merger between TokenEx, a Tulsa, Oklahoma-founded tokenization vendor established in 2010 that reduced PCI scope for more than 300 clients including named customers like Transamerica and Secure Medical, and IXOPAY, a Vienna, Austria-based payment orchestration platform founded in 2014. The combined company operates as IXOPAY, a TokenEx Company, with roughly 100 employees across offices in Vienna and the United States, and carries PCI DSS Level 1 Service Provider certification, the highest tier of PCI compliance available to a service provider.

For CISOs and payments teams, the relevant question is less about either legacy brand and more about whether the combined platform delivers on the integration promise: reduced PCI audit scope from tokenization plus processor flexibility from orchestration, without reintroducing the complexity the merger was meant to eliminate.