- PCI DSS Level 1
- Annual on-site assessment plus quarterly ASV scans; sub-merchants inherit the posture across every connected acquiring bank.
- Scheme programmes
- Visa VDMP / VAMP / VFMP and Mastercard ECP / EFMP positions surfaced per connected bank; routing weights can rotate around at-risk banks.
- Bank-rail mandate posture
- NACHA for US ACH, SEPA mandate IDs for SEPA Direct Debit, Bacs mandates for UK Direct Debit — captured and retained per scheme rules.
- SCA & PSD2
- Selective 3DS2 on the authorisation path keeps approval high in Europe without skipping the SCA bar.
- Sanctions & AML alignment
- Sanctions screening on onboarding; AML monitoring tuned per merchant vertical, volume and counterparty pattern.
- Licensed verticals only
- Licensed gaming, regulated financial services and other compliance-bound verticals supported only where current operating licences exist. Grey and black-market verticals are out of scope regardless of which connected bank clears the auth.