BlackLine Achieves PCI DSS Compliance Validation for PCI Detokenization Service, Expanding Support for Complex Financial Workflows
Key Takeaways
- •BlackLine achieved PCI DSS compliance validation for its PCI Detokenization Service, confirmed against the standard maintained by the PCI Security Standards Council.
- •The service lets authorized users securely access payment card information for automated matching while cardholder data remains within the customer's environment.
- •CEO Owen Ryan stated the validation extends BlackLine's matching and reconciliation capabilities to high-volume, sensitive workflows without sacrificing security or control.
- •CISO Jill Knesek said the validation gives customers independent assurance that BlackLine meets a security standard that is often a prerequisite for supporting payment card workflows.
- •The validation broadens BlackLine's addressable use cases beyond banking and financial services to industries including retail, travel, hospitality, and leisure.

BlackLine, Inc., the Agentic Financial Operations Platform™ for the Office of the CFO, has announced that it achieved Payment Card Industry Data Security Standard (PCI DSS) compliance validation for its PCI Detokenization Service. PCI DSS, maintained by the PCI Security Standards Council — a body founded by major card networks including Visa, Mastercard, and American Express — sets requirements for storing, processing, and transmitting cardholder data. The validation enables organizations to apply BlackLine's proven high-volume transaction matching and reconciliation capabilities to a broader range of complex workflows involving sensitive payment card information.
For organizations processing millions of card transactions, even a small percentage of unmatched transactions can create significant manual work. Security requirements designed to protect cardholder information can limit the data available for automated matching, making it more difficult to fully automate these workflows. BlackLine's PCI Detokenization Integration Service addresses this challenge by enabling authorized users to securely access the payment card information required for matching, while the underlying cardholder data remains within the customer's environment. Combined with BlackLine's existing high-volume transaction-matching capabilities, the service allows organizations to automate more of the reconciliation process while maintaining rigorous security and control.
"Our customers are asking BlackLine to go deeper into some of their most complex operational workflows, and greater automation cannot come at the expense of security or control," said Owen Ryan, CEO and Chairman of BlackLine. "This validation enables organizations to apply BlackLine's proven matching and reconciliation capabilities to more of the high-volume, sensitive workflows they manage every day. It expands where we can deliver value while maintaining the security and trust our customers demand."
"For organizations managing payment-card information, PCI DSS is an important security standard and, in many environments, a prerequisite for technology providers supporting these workflows," said Jill Knesek, Chief Information Security Officer at BlackLine. "This validation gives customers independent assurance that BlackLine has cleared that bar, allowing them to extend automation into sensitive financial processes with confidence."
While banking and financial services represent a significant opportunity for these use cases, organizations across industries such as retail, travel, hospitality, and leisure also manage complex financial workflows that involve payment card information. For finance teams, compliance validations of this kind are often a gating factor in vendor selection, since handling cardholder data without them can expose organizations to penalties and heightened audit scrutiny under the standard. The validation broadens the scope where BlackLine can apply its existing automation and matching capabilities, extending the value of the platform across transaction-intensive environments where scale, security, and control are critical. More information about the company is available at blackline.com.