Compliance & security

PCI-DSS Level 1

Card data is tokenised in a PCI-DSS Level 1 certified vault, keeping merchants out of scope.

ISO 27001 readiness

Information security management aligned to ISO/IEC 27001 controls.

3DS2 frictionless

Risk-based EMV 3-D Secure 2 authentication compliant with PSD2 SCA.

AML / KYC

Merchant KYB, UBO verification, sanctions & PEP screening and transaction velocity monitoring in line with the Estonian Money Laundering and Terrorist Financing Prevention Act.

GDPR

Personal data processed under the EU General Data Protection Regulation; see our Privacy Policy.

Responsible operators

We onboard only operators holding valid licences in their target markets.