Recurring card payments involve a process called tokenisation. It is only performed once during the first collection. 

Tokenisation is the process of replacing sensitive credit/debit card details such as the payment card number (PAN) with a non-sensitive surrogate value called a token. Payments can proceed using tokens instead of live data. This process is illustrated as such: 

This process provides an additional layer of security by hiding sensitive card information. Tokens in Curlec are safely stored in a secure and isolated PCI-compliant payment vault. 


The card tokenisation process for transactions can be split into the authentication and payment stages. Payments can only proceed once the bank has successfully authenticated the transaction request.