Razorpay TokenHQ vs Very Good Security

Razorpay TokenHQ replaces card numbers with tokens so businesses can offer customers saved-card checkout. Razorpay connects businesses with card networks and issuers, either as the Token Requestor or as a connecting layer when the business already fills that role. The service works across Mastercard, RuPay, and Visa, and Razorpay says tokens can be used through other payment gateways. Standard Checkout businesses have TokenHQ enabled without integration; Custom Checkout businesses can request it on demand. API-integrated or server-to-server checkout may take 0–3 weeks of integration effort, depending on current integrations and API count. A dashboard lets businesses track and control token requests and create custom reports. Razorpay describes the APIs as suited to high traffic volumes. Saving a card or creating a token requires customer consent and an additional authentication factor. The card-to-token relationship is held in a vault owned by a card network or issuing bank; merchants may retain the last four card digits and issuer name for tracking or analytics. Pricing is on request. The service is available on Android, iOS, web, and API.

Very Good Security has no write-up on Specifiction yet; its figures are above.