- PCI DSS Level 1
- Vault, switch and tokenisation are PCI DSS Level 1 service-provider components; sub-merchants inherit the posture across every phone-side mode.
- PCI MPoC (SoftPOS)
- Partner Tap-to-Phone apps follow the PCI MPoC programme for accepting card-present transactions on commercial off-the-shelf devices.
- PCI scope on over-the-phone
- DTMF tone-capture from a PCI-listed partner keeps card digits out of the agent's audio path and recording; PCI scope sits with the partner.
- SCA & PSD2 (online + link)
- Selective EMV 3DS2 on card-not-present surfaces keeps approval high in Europe without skipping the SCA bar.
- Sanctions & AML alignment
- Sanctions screening at onboarding; AML monitoring tuned to each merchant's vertical, volume and channel mix.
- Licensed verticals only
- Licensed gaming, regulated financial services and other compliance-bound verticals supported only where current operating licences exist. Grey and black-market verticals are out of scope across every phone-side mode.