---
title: Zero PCI Scope
slug: zero-pci-scope
docTags: 
createdAt: 2026-06-01T13:20:12.809Z
---

# How It Works

Using this approach for Forter tokenization solution, you can process payments **without handling raw card details**, reducing PCI compliance scope and improving security.

1. **Provision Tokens** – Obtain a secure token for a transaction.
2. **Use Tokens** – Utilize token for payments, either in single-use or multi-use forms.

## Provision Tokens

::::WorkflowBlock
:::WorkflowBlockItem
### Collect card data

This step ensures that you do not handle raw card data. Instead, the [Hosted Fields](https://docs.forter.com/hosted-fields-sdk) component securely transmits the card details to Forter and returns a **single-use token**.

Single-use tokens ensure security by preventing direct card data storage. They are the first step before upgrading to a multi-use token for future transactions.

```mermaid
sequenceDiagram
    autonumber
    participant U as Buyer
    participant CP as Checkout Page
    participant HF as Hosted Fields
    participant F as Forter Tokenization Server
    
    U->>HF: Insert Card Data {cardData}
    HF->>F: Send card data securely {cardData}
    F-->>CP: Response {forterSingleUseToken}
```
:::

:::WorkflowBlockItem
### Pay with Forter token

At this stage, you use the single-use token to complete a payment.

```mermaid
sequenceDiagram
    autonumber
    participant U as Buyer
    participant CP as Checkout Page
    participant M as Merchant
    participant F as Forter Proxy
    participant P as Network/PSP
    
    U->>M: Pay {forterSingleUseToken}    
    M->>F: Authorization {forterSingleUseToken}
    F->>P: Authorization {cardData}
    P-->>F: Response {authorizationOutcome}
    F-->>M: Response {authorizationOutcome}
    M-->>CP: Payment Succeeded/Failed
    CP-->>U: Payment Succeeded/Failed
```

Once authorized, the transaction is completed.
:::

:::WorkflowBlockItem
### Upgrade token (Optional)

After payment, you may [upgrade the token to multi-use](https://docs.forter.com/reference/upgrade-to-multi-use), allowing future payments without requiring card re-entry. Forter provides two solutions for generating a multi-use token.

**1. Network Token**: Preferred by issuers, adds security, and increases approval rates.

```mermaid
sequenceDiagram
    autonumber
    participant M as Merchant
    participant F as Forter Tokenization Server
%%    participant FV as Forter Vault
    participant CN as Card Network
    
    M->>F: Upgrade to Multi-Use Token <br/> {forterSingleUseToken, networkToken.provision=true}
%%    F->>FV: Retrieve Card Data {forterSingleUseToken}
%%    FV-->>F: Response {cardData}
    F->>CN: Provision Network Token {cardData}
    CN-->>F: Response {networkToken}
    F->>F: Create Multi-Use token {cardData, networkToken}
    F->>M: Response {multiUseToken} 
    M->>M: Save Forter Token {multiUseToken}
```

**2. Multi-Use Token without Network Token:** If a network token isn’t available, Forter provides its own secure token.

```mermaid
sequenceDiagram
    autonumber
    participant M as Merchant
    participant F as Forter Tokenization Server
%%    participant FV as Forter Vault
    
    M->>F: Upgrade to Multi-Use Token <br/> {forterSingleUseToken}
%%    F->>FV: Create Multi-Use token {forterSingleUseToken}
%%    FV-->>F: Response {multiUseToken}
    F->>M: Response {multiUseToken} 
    M->>M: Save Forter Token {multiUseToken}
```
:::
::::

***

## Use Tokens

Once a token has been provisioned, you can use it for future payments. The method depends on whether a Network Token was issued.

Based on the way the token was created there are two different options for using the card

**1. Use a Forter Token linked to a Network Token**

```mermaid
sequenceDiagram
    autonumber
    participant U as Buyer
    participant CP as Checkout Page
    participant M as Merchant
    participant F as Forter Proxy
%%    participant FV as Forter Vault
    participant PSP as PSP
    participant CN as Card Network
    
    U->>CP: Pay with selected card
    CP->>M: Pay {selectedCardIndex}
    M->>M: Retrieve Forter Multi-Use token {selectedCardIndex}
    M->>F: Authorization <br/> {multiUseToken, networkToken.provision=true}
%%    F->>FV: Retrieve Network Token {multiUseToken}
%%    FV-->>F: Response {networkToken}
    F->>CN: Provision Cryptogram {networkToken}
    CN-->>F: Response {cryptogram}
    F->>PSP: Authorization {cryptogram}
    PSP-->>F: Response {authorizationResult}
    F-->>M: Response {authorizationResult}
    M-->>CP: Payment succeeded/failed
    CP-->>M: Payment succeeded/failed
```

:::hint{type="info"}
A cryptogram is a secure, time-sensitive authentication value that improves approval rates and security for network token transactions.
:::

**2. Using a Forter Multi-Use Token (No Network Token).**

```mermaid
sequenceDiagram
    autonumber
    participant U as Buyer
    participant CP as Checkout Page
    participant M as Merchant
    participant F as Forter Proxy
%%    participant FV as Forter Vault
    participant PSP as PSP
    
    U->>CP: Pay with selected card
    CP->>M: Pay {selectedCardIndex}
    M->>M: Retrieve Forter Multi-Use token {selectedCardIndex}
    M->>F: Authorization <br/> {multiUseToken}
%%    F->>FV: Retrieve card data {multiUseToken}
%%    FV-->>F: Response {cardData}
    F->>PSP: Authorization {cardData}
    PSP-->>F: Response {authorizationResult}
    F-->>M: Response {authorizationResult}
    M-->>CP: Payment succeeded/failed
    CP-->>M: Payment succeeded/failed
```