Information for Payment Processors

Exporting Merchant Tokens to Xplor Pay

What is Xplor Pay’s process for accepting tokens?

Xplor Pay accepts token exports for merchants transitioning from other processors. Below is an overview of a typical transfer flow:

1. The merchant notifies Xplor Pay and the existing processor of the intent to transfer tokens.

2. Xplor Pay creates an SFTP account for the existing processor.

3. The existing processor provides Xplor Pay with an external IP address to whitelist in our firewall.

4. The merchant works with the existing processor to complete the export process.

5. The existing processor encrypts the export file using Xplor Pay’s public PGP key.

6. The encrypted export file is uploaded to the SFTP account.

7. Xplor Pay decrypts and imports the token and card data into our Vault.

8. Xplor Pay notifies the merchant once the import process is complete.

---

Where can I find Xplor Pay’s public PGP key?

Please use the following PGP public key to encrypt all token files sent to Xplor Pay.

PGP public key

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.22 (GNU/Linux)

mQINBF4TtuIBEADa2A6NISo3uFett4APY2w000k7jENpglknjASidubBjC2TKnMe
a4mZTqUk6hb1gQCHtTc68KYMORkx6qz3x9IIIsVJ7dl5K0/NomDCzkijvoaXEF8z
fY1NBhSml2kZRgzVjPd2emZ0+W5tOShL18gj7II8WkH9IASFcWag38vy/nzYkuiw
MA28hXlbUva13Nv/G6L2GIM5G48WVrhVkclkOdLO7mlsAzg3ORVNsIPezfIQ/W9x
n5fDnG5T7fIFhyjAnWKC7lypy+w9zT5OQjS4apZGcURlDfdrpY2Yj86c4thPho5x
OmkSt3xRflLzEtb1vxkOhagnjzMvcE0CnkpGKsX0NTpe4ZDj+8xU0/cDVVaGWp9v
jA6aX7F1LuQ6K/lkiF0YQOrQunwow+h3VThnholptFRMW9hAfv0G2LuzCdcIh628
1uranYZuC7i2MrEk8HBzWkbhevB/yH6wDaHHwYKSjoqLGFWjIKASzR5QybOtpCfv
i1S0r58KyBHko1PE1pGaNoA4ij1bCZinoBbMyDlnUqyln2wTzbP0N30N9NClEoJd
fDMk7P/NoWmaTXjcpeCZ/8kuRX4yNbYUDcZ3XsqOguwLrhoClTIeQHDWhf25EOFW
Ht+s0tekqeER/G4Tw+3nYsw7EIAEtX+BzVv84oZXw/IeUE7BC1GXI7UWcQARAQAB
tDRDbGVhcmVudCBUb2tlbiBUcmFuc2ZlcnMgPGludGVncmF0aW9uc0BjbGVhcmVu
dC5jb20+iQI5BBMBAgAjBQJeE7biAhsDBwsJCAcDAgEGFQgCCQoLBBYCAwECHgEC
F4AACgkQO5/uqi1QpnqPpBAAoJn2+CCKWUZ4sWDQLIoCoSsXOR566Cy/9i8AI53O
H7H5PR+2Sx7Rt5iTorJF05Ff4jisIQ2gEb+X4E38v1d5JiDUwGD/SkQ+Z1Qe7t3/
uHfgqqZBf9RZO3Z5tTwpVL1ggyYosMeki32G105pt6wJyzrG0eun8t53lpw6ysml
Bgn5kRONhegO57soRHw9Awiik36w6x7+nppfjbnhg2WmhMk5ev40m6kC/KDWG8Jc
mqw4jnsTMbtrMMLiSTnTsvit3M/1yBtgn6W8eliGqPhZ8IV4NJ5Y190HphLjfsp3
ZUn0xOwlg98ohYSvDUTCWE0nfUd4fKprGv2KsOROyTGJX5O6DSQwo32gB8qIiZrf
lVMFQ/7RgWEztnUtvWFzI7SLhx8hUrCRCTh9qYXXQ1ZxrHKGH1tXdEbLT1QwBFHt
LFC1Xg8uLilDkm34TbRl/VLT7fEPGLPqzg/tFAJ1rHWVeKxUO+svKVjftS7JG74v
UPav7X174qoHMBntYQm/mxc99g22xaJJzRT87CwW4sg1iJiEGYjAqt8S8lsqXO8E
UHcctwEARHaTqQQXimN1dyjKyV9H+EgSzDyE4op8UfZSADs58y3Ew050Y3b6+U7J
rKo0jmqmBLKMOECpMbezKEbnzASMdqzFhOq7zERKHNVXQte7e3BaG7uOibDl6kH3
nAK5Ag0EXhO24gEQAM568BSVhZ+R98z5GQhOK55gVfkGEinby3ocJEzB/X9UFYzb
IYm6F0RPsrcR5qYd6g5Jts838xiy0gRYfXCNJp5NIHuujYJnfCHbbyRNtfu6j+/I
CezitFlMLNky1ltCx7UzQBxZ1BbDOb1S0DDVmaHakP8njSzh0IB3R8+5A7jEmkKq
c9+kGgkUrJAr0eaMWRoDt1Mah5r9iiM4CMwXlSfPEQETBH64bogfsj9FI/Nocjsd
DsN55ku5bFoZyeS5NMtCivz/iAU2mk9p/MjwxnW6QYCiUsCgxcyCxOowMpS2lpeU
psOYHlrmxV9BxReZYher6DV6cckNfRN80uMM6kdz7rsdXFlJuylRhzEHhPuP/zip
pPKpk9w/D5lPK6qEXpVePdC6hMFlr/kVtdaipK8pJpQDikv5uLUILAaNkujJD179
Y60mjyqg9WynZ6di3ZM6461h/hrDl7FuHg2xYJoRwOydGdmEhMz1dW3sqsHpd2+z
cbQCvkuA+TFxR8PmPn6vAhfbQkKtHIhNBxLaOyZxj6OqcY0bFHSy4t1G0OFUgqSu
mPi6TsO38yTiPT6q9ezDi1q0PsCUm9isTGHRhdo87PM8CWNqmIExjbzIbOhAqk+N
0Om+ghAp43XxqenyXHNNNjFD/6AglVHkrVc85Y8hEEBy1KMjpR8r2G992IbBABEB
AAGJAh8EGAECAAkFAl4TtuICGwwACgkQO5/uqi1Qpnph6xAAlKZBolIJOerrn18v
ONhnsJxEgKqCVWc4a6E6h7doVooOYE4rHh4nU2DC0loScas9cmByqodW+M7AFAaS
yQ36ftDsHJtKy0ewaRklRZkGPKhEo8wC0bTqYnIIihvM/bEf6uzz7lMqdxqM+bCS
E2vVIck+RvD2p2NHk0B0VYQ4NcB/Qw3yrz2UugTm9jxk26FBNWjehXlS9///5wmH
qxjrB478C5LIjhd3c7QYKuhKFZKD9gY7zKVHDqNXtVHJtaiyNCVbUYmGCg/nBZq1
UvhUZz4DkNQPPKNpFd/MyXgIpZ5qaiAMPyPVBgiGEY9RKZybTCsqmxeId49QcJlk
hq+1ul+0Vu5eptIDzI9lBBRVqSqwCf1H6EBPNEbkeJEgxtk7E8yh28GZdfupEeDX
XzwwGkPQmKDA2Xqs/ZuH7YW+45Nuv72sRuz6lPWAogyIzFUB8U3MX/B7ktTWPddl
Plkanat+MY1UsN8UL4g8GY0BEu0ifck5waDwua4e4Fr7Q2LuAFiyEPfFN39gNIma
Cey5aH9qR6wgdcp2CtFtGpo9wQ1BeMG6RPv6SzH39W4lcf8lJnmDm+OEkcT7KUx1
kWL0OkNVmhE3gwWlVBNBg6fsDQ5nxqV8zmyJfVShdOizhDu/o+T2qvxPDLKQXNiW
zPXeHpAH4qnM7S2f0S73X5M/heM=
=Bv3E
-----END PGP PUBLIC KEY BLOCK-----

---

Can I use my own SFTP server to transmit tokens to Xplor Pay?

Please contact the Xplor Pay Application Support team at [email protected] to discuss using a non–Xplor Pay SFTP server for token transfers.

Regardless of which server is used, the transmitted file must be encrypted using Xplor Pay’s public PGP key.

---

Where can I get a copy of Xplor Pay’s attestation of PCI compliance?

To obtain a copy of Xplor Pay’s PCI Compliance Attestation, please refer to the document linked below:

416KB

PCI-DSS-v4-0-1-AOC-Clearent-30Jul2025.pdf

pdf

---

Can I email Xplor Pay the encrypted token file?

Xplor Pay does not accept token data via email under any circumstances. All card data—even when encrypted—must remain within Xplor Pay’s approved network segments.

---

Whom do I contact with questions or issues?

Please reach out to the Xplor Pay Application Support team at [email protected] with any questions or concerns during the export or transmission process.