Cashfree Token Vault

Cashfree Token Vault is a cloud service that replaces stored card numbers with payment tokens for saved-card transactions. It is best suited to merchants already using Cashfree checkout or willing to integrate its API, especially those serving several card types. The principal trade-off is that Cashfree keeps the token reference created through its vault.

Overview

Token Vault lets a merchant process saved-card payments without retaining card details on its own platform. Cashfree describes a single integration that can work across multiple payment gateways or card networks, making it useful for merchants that want routing flexibility rather than a vault tied to one payment path. That interoperability does not make every identifier portable: the Cashfree token reference remains with Cashfree, although a merchant can fetch the network token and use it through another payment aggregator.

For customers, the flow is familiar: select a saved card and enter its CVV. Cashfree says its ecosystem contains more than 16 million saved cards, but that aggregate does not indicate how many cards any particular merchant can access.

Key features

Broad card coverage: Credit, debit, prepaid and corporate cards are supported. Visa and Mastercard credit and debit tokenization are specifically described, covering both consumer and business payment use cases.

Consent-led provisioning: A customer must give explicit consent before a token is created. Provisioning stops when two-factor authentication fails, so merchants cannot silently enroll cards or bypass a failed authentication step.

Restricted merchant data: Merchants may retain only the last four digits, card scheme and issuing bank name. BIN, expiry date and CVV cannot be stored, which limits the payment data exposed on merchant systems but also restricts what those systems can use for card management.

Token isolation: A merchant cannot recover the underlying card number from a token. Only the relevant card scheme and issuing bank can retrieve it, keeping detokenization outside the merchant environment.

Checkout options: Saved-card tokenization is enabled automatically for Standard Checkout. Seamless Pro merchants must integrate or update their APIs and therefore face more implementation work.

Network tokenization and webhooks: Network tokenization is supported, with webhook support for event-driven integrations. The vault is vendor-hosted in a cloud deployment and has no detokenization API for merchants.

Integrations and security posture: Cashfree lists Shopify, Wix, WooCommerce, PayPal, WordPress and Zoho integrations. Its company security page cites ISO/IEC 27001:2022, PCI-DSS v4.0.1 and SOC 2; support includes a Support Center, customer query resolution, a bank-downtime detector and a Discord community.

There is an important migration constraint. RBI rules described by Cashfree do not permit bulk tokenization of cards already saved by PCI/DSS-compliant merchants; those saved cards must be deleted before tokenization. A migration therefore requires a deliberate customer re-enrollment process rather than a silent batch conversion.

Pricing

Cashfree uses paid, custom pricing for Token Vault. No product price or free trial is stated, so the service is aimed at merchants prepared to request a quote and assess the commercial terms against their transaction volume. There are no published seat, quota, renewal or free-plan limits to compare. Standard Checkout avoids a separate API setup for saved cards, while Seamless Pro customers should account for integration work when evaluating the total cost.

Platforms

Token Vault is delivered as a cloud service with Android, iOS, web and API support. It suits omnichannel teams that need a shared tokenization layer across apps, websites and server-side payment flows rather than an on-premises vault.

Who it's for

Choose it when keeping card numbers off merchant infrastructure is a primary requirement, when the catalog includes prepaid or corporate cards, or when saved cards need to work across more than one payment route. Standard Checkout merchants get the lowest-friction setup. Teams on Seamless Pro, or teams planning to leave Cashfree, should budget for API work and examine the retained Cashfree reference carefully. It is less suitable for organizations that require merchant-controlled detokenization or a bulk migration of an existing PCI/DSS-compliant card store.

Pros and cons

Pros

Reduces card-data exposure: Merchant systems keep only limited display and issuer fields, not card numbers, BINs, expiry dates or CVVs.

Useful card breadth: Credit, debit, prepaid and corporate support, with Visa and Mastercard coverage, accommodates varied customer portfolios.

Flexible payment routing: The stated cross-gateway and cross-network design can avoid rebuilding saved-card handling for every payment route.

Automatic Standard Checkout setup: Merchants on Cashfree's standard flow can enable saved cards without a separate vault integration.

Cons

Cashfree-bound reference: The vault reference stays with Cashfree, creating migration and switching friction even though network tokens can be fetched elsewhere.

Seamless Pro implementation burden: API integration or updates are required instead of automatic enablement.

No merchant detokenization API: Applications cannot retrieve card numbers from tokens for workflows that depend on direct card access.

Migration is not bulk-friendly: Existing PCI/DSS-compliant saved cards cannot simply be bulk-tokenized under the described RBI rules.

Alternatives

Browse Payment Tokenization Software for a wider comparison. Pick DeloPay instead if a free trial and a published Power plan at $2.25 a month, billed at 2.25% per transaction for $100,000–$500,000 monthly volume, are more useful than custom pricing. American Express Token Service is the better fit for an Amex-focused deployment with a free plan and no stated deployment or use fees, subject to market availability. Choose Hyperswitch Card Vault when self-hosting, 90+ payment integrations and community support outweigh managing compliance yourself. Basis Theory suits teams that want a published Standard platform price of $995 per month with 20,000 tokens included and $0.05 per additional token. FIS Data Integrity Manager is another paid web option. Worldpay eProtect is a paid Android, API, iOS and web alternative. IXOPAY fits buyers seeking plans starting at $1,000 per month and a free trial. Purse Vault is a paid Android, iOS and web service priced by demo.

Verdict

Cashfree Token Vault is a strong choice for Cashfree merchants that need saved-card payments while keeping card numbers out of their systems, particularly on Standard Checkout and across a broad card mix. Look elsewhere if portable vault ownership, merchant-side detokenization or a transparent published price is more important than Cashfree's integrated compliance and checkout path.