How Dohop connects the world of aviation with secure, seamless payment orchestration.

Founded in 2004, Dohop is a travel technology company that helps airlines and travel providers create seamless connections across different carriers. Originally launched as a flight search engine, it has evolved into a platform focused on virtual interlining, enabling travelers to combine flights into a single journey.

Dohop connects airlines, airports, and rail providers worldwide, powering flexible travel options and improving the passenger experience with solutions that handle complex itineraries and disruptions.

As a provider of virtual interlining platforms, Dohop manages booking and payment processes across multiple airline partners—making it responsible for handling sensitive customer payment data. This created a dual challenge: maintaining the highest level of security while also navigating the complexity and operational overhead of PCI DSS compliance.

With multiple systems involved in processing transactions, reducing the scope of compliance and protecting credit card data without disrupting their platform became critical. Dohop needed a way to externalize sensitive data, streamline compliance efforts, and ensure their infrastructure could scale securely as they continued to grow their partner network.

To address these challenges, Dohop implemented PCI Proxy’s Universal Token Vault, allowing them to replace sensitive card data with secure tokens across their systems.

This approach externalized payment data handling, significantly reducing the number of systems exposed to raw card information.

In parallel, Dohop partnered with USD AG to guide and validate their PCI DSS certification process. Together, these solutions enabled a more streamlined, secure, and scalable payment infrastructure.

By tokenizing payment data and limiting direct exposure to sensitive information, Dohop substantially reduced the scope and complexity of their PCI DSS compliance requirements.

This led to a faster and more efficient certification process, supported by strong internal documentation and collaboration with their partners.

"We are proud to provide our customers with a product that meets the strictest security requirements."

‍

At the same time, Dohop enhanced the overall security of their platform, ensuring that customer payment data is protected to the highest standards without impacting operational performance.

By tokenizing payment data and limiting direct exposure to sensitive information, Dohop substantially reduced the scope and complexity of their PCI DSS compliance requirements.

This led to a faster and more efficient certification process, supported by strong internal documentation and collaboration with their partners.

"We chose strong and experienced partners for our PCI DSS certification project. Thanks to the professional, goal-oriented approach of PCI Proxy, our certification project went more than smoothly."

‍

At the same time, Dohop enhanced the overall security of their platform, ensuring that customer payment data is protected to the highest standards without impacting operational performance.