Travel agents, tour operators, hotels and restaurants take card payments by phone, online and at the desk, and hold guests’ personal details.
These are the issues we see most often in this sector. Each one has a fix.
IATA and acquirer requirements
IATA requires accredited travel agents to comply with PCI DSS, and acquirers expect yearly validation.
Card-not-present bookings
Phone and online bookings expose card data to agents, systems and booking platforms.
Guest personal information
Passport details, itineraries and contact data fall under Law 25, PIPEDA and, for European travellers, the GDPR.
Hover each card to see how we close the gap.
Keep your IATA accreditation safe
Lapsed PCI DSS compliance puts your settlement arrangements at risk.
Since 2018, 365 merchants have validated PCI DSS with Accel PCI, most of them travel agencies, many through the ACTA (Association of Canadian Travel Agencies) member program. Ubitrak also assesses travel and hospitality software providers and issues the documentation IATA asks for.
Take bookings without storing cards
Every stored card number widens your scope.
Ubitrak helps you reduce scope with tokenization and better booking flows, then validates the result.
Treat guest data with care
A privacy incident damages reputation faster than any review.
Accel GRC tracks your privacy obligations and incident register in one place.
Ubitrak · Audits and certification
A PCI QSA company since 2011, with 80 assessment clients in 7 countries. PCI DSS, Interac, SOC 2 with CPA firms, ISO 27001, ASV scans and penetration tests, all tracked in the Ubitrak Audit Portal.
Accel PCI · Self-serve PCI compliance
A guided web portal that takes merchants to their PCI DSS compliance certificate in six steps, with a pre-filled questionnaire and a clear to-do list. No support hours or surprise charges.
Accel GRC · Governance, risk and compliance
One portal to manage your cybersecurity obligations: Quebec’s privacy law, PCI DSS and your clients’ security requirements. Includes an internal audit report, training and document templates. Built and supported by Montreal experts.
Tell us what you need and when. We’ll tell you what it takes, what it costs and how long it’ll take. No obligation.