"From its inception, we identified the benefits of the project for the market and felt it was necessary to develop it, given the high technical capabilities required”
Alberto González
CISO - MIT ( a Getnet company)
This requirement was driven by both its own stringent internal security policies and the need to simplify compliance with the PCI DSS standard.
In response to this need, Getnet led the development of the first certified P2PE solution in the region through its Technology Hub in Mexico (MIT), marking a milestone in the Latin American payments industry.
P2PE: total protection from the point of interaction.
P2PE (Point-to-Point Encryption) solution encrypts sensitive card data at the point of sale and keeps it encrypted throughout the payment journey until processing. This protects cardholder data in transit, significantly reducing the risk of data exfiltration and ensuring that information cannot be intercepted, stolen or manipulated.
Implementing a P2PE-certified solution offers merchants significant benefits:
- Reduced PCI DSS compliance scope and costs, minimising audits and validation efforts.
- Peace of mind that comes with having a solution validated to the highest security standards.
- An improved payment experience for customers, including:
o Faster and more efficient transactions
o Increased security of personal data adn card-presen
o Protection against fraud and identity theft
o Increased trust in the merchant
A technological challenge and a pioneering solution
When Meliá first expressed its need, there was no certified P2PE solution available in Latin America. This was a significant challenge, but also an opportunity for innovation.
Getnet's Technology Hub in Mexico (MIT) accepted the challenge, launching a project led by its cybersecurity team, with high technical requirements in terms of cryptography and risk management.
In addition to developing the P2PE solution from scratch, the project faced another challenge in the form of integration with Opera Cloud, Meliá's recently adopted hotel management system.
The P2PE standard requires compliance with over 500 security requirements organised around three pillars: people, processes, and technology. To meet these requirements, MIT adapted its internal processes and developed its technology, ensuring a robust, flexible and scalable solution.
The result matched the Meliá brand
The outcome was a card-present payment solution:
- P2PE certified.
- Fully integrated with Opera Cloud
Thanks to this development, Meliá is able to comply with its internal security policies and optimise its regulatory compliance, while also enhancing its customers' experience by ensuring fully secure electronic payments.
"Getnet is a very important partner for Meliá. They provide us with the crucial technology needed to meet our customers' needs at the moment of purchase. This project is extremely valuable to our company, and we plan to implement it worldwide”
Gaspar Llabrés
Head of the Credit and Insurance Department at Meliá
A scalable solution for the hotel, retail and restaurant sectors
The successful implementation of the P2PE solution, developed by MIT and deployed by Getnet at Meliá, demonstrates its applicability not only to the hotel sector, but also to other industries. For instance, the retail and restaurant sectors, where secure face-to-face payments are essential.
This milestone establishes Getnet as a leader in innovative and secure payment methods, leading the way for future implementations in the region.