February 2026 Summaries

Online travel agencies (OTAs) are navigating a complex and fluid environment in the travel industry, where multiple parties and systems interact, often requiring OTAs to handle card data, which carries significant compliance implications. Historically, OTAs managed raw card information as a necessity for payment processing and supplier transactions, but advancements in technology, such as Evervault, are shifting this norm. Evervault enables OTAs to securely collect, transform, and route card data without directly handling it, thus reducing compliance scope and risk. This is achieved through the use of secure UI components, encryption, and relay systems, which also allow for seamless payment flows and integration with various suppliers and payment service providers. The travel industry's reliance on legacy systems like EDIFACT and the more modern New Distribution Capability (NDC) presents challenges, but OTAs benefit from integrating both systems to optimize transactions and manage multiparty payments more efficiently. With Evervault's solutions, OTAs can maintain control over encrypted card data while streamlining processes, minimizing compliance burdens, and enhancing security, providing a modern approach to handling payments in the travel sector.

Technological evolution in the travel industry has led to significant advancements in how travel data is managed and shared, particularly through the development of standards like the New Distribution Capability (NDC) by the International Air Transport Association (IATA). NDC, established in 2012, aims to overcome the limitations of the older EDIFACT standard by using XML, which supports rich content, is widely understood by developers, and is both machine and human-readable. This allows airlines to have more control over how their products are packaged and sold, offering real-time updates, dynamic pricing, and tailored offers to customers. Meanwhile, Evervault provides solutions that facilitate secure integration for travel sellers working with multiple partners, helping to handle sensitive data like payment information and personally identifiable information through secure proxying and data transformation within its ecosystem. These innovations not only streamline operations but also enhance the flexibility and security of travel data management.