​
Card Token Migration Process

​
1. Request Token Export from Current Processor

  • Initiate contact with your current payment processor’s support team through their official support channels
  • Submit a formal request for a complete export of all your customer card tokens
  • Be prepared to provide verification of your identity and authorization to access this sensitive data
  • Your payment processor will likely require you to complete several compliance verification steps
  • Additional security approvals may be needed from their risk and compliance teams
  • The process could take 5-10 business days depending on your processor’s policies

​
2. Securely Share the Export with Dodo Payments

  • Upon receiving the encrypted token export file from your current processor, do not decrypt it
  • You have two secure options to share the data with our team:
    1. Use our dedicated secure upload portal at [secure upload link]
    2. Transfer via our SFTP server (credentials will be provided upon request)
  • Strictly limit file access to authorized personnel with proper security clearance
  • Document all individuals who handle the file to maintain a clear chain of custody
  • Follow all PCI DSS requirements for handling sensitive payment data
  • Delete any local copies of the file immediately after successful transfer

​
3. Dodo Payments Processes the Migration

  • Our specialized migration team will handle the token import process
  • We follow a detailed procedure to:
    • Verify file integrity and encryption
    • Map the old token format to our secure token structure
    • Import tokens into our PCI-compliant Card Vault using military-grade encryption
    • Perform multiple validation checks to ensure data accuracy
  • You will receive detailed status updates throughout the process
  • Upon completion, we’ll send a comprehensive migration report
  • Typical processing time is 2-3 business days for standard migrations

​
4. Validate and Start Using the New Tokens

  • We will provide detailed documentation on the new token format
  • You’ll receive a complete mapping of old tokens to new Dodo Payments tokens
  • A dedicated sandbox environment will be provisioned for testing
  • We recommend:
    • Testing all transaction types with the migrated tokens
    • Verifying successful processing of recurring charges
    • Confirming proper token storage and retrieval
    • Running parallel systems temporarily to ensure smooth transition
  • Our technical team will be available for support throughout testing

​
5. PGP Encryption for Secure Data Transfer

For maximum security when transferring sensitive card data during the migration process, it is mandatory to encrypt all files using our PGP public key. This provides an additional layer of protection beyond transport-level encryption: