/DIGITAL WALLET TOKENISATION

Apple Pay and Google Pay for every bank in the market.

A turnkey tokenisation platform built for BamCard, the leading card processor in Bosnia & Herzegovina, enabling any bank in the region to launch digital wallet payments without direct Visa or Mastercard integration.

/OVERVIEW

ONE PLATFORM. EVERY BANK. WEEKS, NOT MONTHS.

APPLE PAY

GOOGLE PAY

PCI DSS

TOKENISATION

MULTI-TENANT

MDES

BamCard approached Evolt with a clear ambition: bring Apple Pay and Google Pay to banks across Bosnia & Herzegovina. The problem was the complexity standing in the way. Direct integrations with Visa and Mastercard tokenisation systems are expensive, technically demanding, and slow. Evolt's role was to remove all of that friction and deliver a platform that any bank could adopt with minimal effort, making BamCard the single trusted bridge between wallet providers and the entire regional banking market.

/THE CHALLENGE

WHAT BAMCARD NEEDED US TO BUILD.

Banks across the region faced the same barriers every time they tried to launch digital wallet payments. Each one was significant on its own. Together, they made independent launches impractical.

BARRIERS

Complex and expensive direct integrations with Visa and Mastercard tokenisation systems

Strict PCI DSS and industry compliance requirements

Multiple authorisation flows covering different authentication and verification methods

Device-specific provisioning logic for different wallet and device configurations

Certificate exchanges and complex security credential management during onboarding

Complex and expensive direct integrations with Visa and Mastercard tokenisation systems

Strict PCI DSS and industry compliance requirements

Multiple authorisation flows covering different authentication and verification methods

Device-specific provisioning logic for different wallet and device configurations

Certificate exchanges and complex security credential management during onboarding

/TECH STACK

TECH STACK

Tokenisation Networks

Mastercard MDES | Visa VTS

Security

PCI DSS | mTLS | encrypted vaults | masked PAN handling

Architecture

Multi-tenant | built for financial institutions at scale

Tokenisation Networks

Mastercard MDES | Visa VTS

Security

PCI DSS | mTLS | encrypted vaults | masked PAN handling

Architecture

Multi-tenant | built for financial institutions at scale

/THE SOLUTION

THE SECURE BRIDGE BETWEEN BANKS AND THE WORLD'S BIGGEST WALLETS.

Evolt built a tokenisation orchestration platform that acts as a secure bridge between Apple Pay, Google Pay, the Visa and Mastercard payment networks, BamCard's processing system, and individual bank mobile applications. Banks outsource 90% of the technical complexity and focus entirely on customer experience.

HOW IT WORKS

The user adds their card directly inside Apple Wallet or Google Wallet. The platform orchestrates all interactions with Visa and Mastercard, validates card details in the Card Management System, screens and evaluates the digitisation request across green, yellow, and red paths, provides the appropriate authorisation channel (SMS, app, email, or call centre), and confirms token activation. Banks can allow users to add their card directly from their own mobile app. Two secure APIs handle it: one to check whether the card already has active tokens, and one to generate encrypted provisioning values for Apple or Google. This significantly reduces onboarding friction and increases wallet adoption rates.

SECURITY AND COMPLIANCE

Security is not an add-on. It is built into every layer of the platform from day one. The architecture is fully PCI DSS-aligned, with mutual TLS securing all connections with Visa, Mastercard, and partner banks. The token vault is encrypted and stores only masked PANs, while per-device provisioning logic gives granular control over token generation. Full audit logs track every action and lifecycle event, and an additional encryption layer protects all sensitive payloads and signatures.

ADMIN DASHBOARDS

A powerful multi-tenant dashboard gives BamCard and partner banks full visibility and operational control. From the admin panel, teams can view all cardholders and devices, block, suspend, or delete access instantly, deactivate tokens with one click, and analyse user-level token activity. Transaction and tokenisation insights cover daily, weekly, and monthly volumes, device distribution across iPhone, Apple Watch, Android, and others, success versus failed tokenisation attempts, OTP failures, and fraud indicators. Operational tooling includes certificate expiration tracking, error monitoring and alerting, bank-by-bank performance statistics, and real-time system health monitoring.

/THE IMPACT

ONE PLATFORM BUILT FOR THREE WINNERS.

For BamCard

One market-wide tokenisation platform covering the entire region
Significant reduction in integration overhead across all partner banks
Lower operational and onboarding costs
Faster rollout of modern payment services to every bank in the network

For Banks

No direct integration with Mastercard or Visa tokenisation systems required
Secure, compliant, ready-to-deploy solution
Apple Pay and Google Pay live in weeks instead of months, at a fraction of the typical cost
Full visibility and control over tokens and users through dedicated dashboards