Point-to-Point Encryption Now Generally Available

We’re excited to announce that PCI-validated point-to-point encryption (P2PE) is now generally available for payment processing in Blackbaud Raiser’s Edge NXT. The P2PE solution is offered through Blackbaud’s partnership with Bluefin, a leading provider of payment security solutions.

What is point-to-point encryption? 

Point-to-Point Encryption (P2PE) is a payments industry standard established by the PCI Security Standards Council. Its purpose is to provide added security by encrypting cardholder data from the moment the information enters the payment device and travels through your organization’s network. Sensitive card data stays encrypted until it reaches the payment processor for decryption and processing. This prevents clear-text cardholder data from entering your organization’s system or network where it could be accessible in the event of a data breach.


While Blackbaud solutions all adhere to the Payment Card Industry Data Security Standard (PCI DSS) and Payment Application Data Security Standard (PA DSS), P2PE offers additional security for your organization by significantly reducing the risk of cardholder data being compromised in transit. 

What are the benefits for my organization? 

In addition to added security, further benefits of P2PE include: 

• PCI scope reduction – Having a PCI-validated P2PE solution can reduce your organization’s PCI scope down to the 33 question P2PE self-assessment questionnaire.
• Reduced cost of compliance – Your organization may be able to reduce the amount spent on annual PCI audits and compliance by limiting your cardholder data environment (CDE).
• One-on-one customer support – As a Blackbaud customer, you’ll get one-on-one support for the P2PE solution through a dedicated Bluefin relationship manager.

How do I get started? 

Point-to-point encryption is available to organizations who process payments through Blackbaud Merchant Services. To sign up for the P2PE solution, visit http://www.bluefinpartner.com/blackbaud/ – a Bluefin representative will provide you with additional instructions. After you receive and activate your PCI-approved ID Tech SREDKey P2PE device, enable P2PE in Blackbaud Raiser’s Edge NXT from Control panel, Settings, under Gift management.

    

How can I learn more?

• For more information about data security in Blackbaud solutions, visit our Data Security resources.
• For more information about P2PE, watch a 2-minute video from Bluefin and visit our Point-to-Point Encryption (P2PE) assistance and resources page.