- PCI DSS Level 1
- Vault, switch and tokenisation are PCI DSS Level 1 service-provider components; the flat-rate contract shape doesn't change the security posture.
- Scheme programmes
- Visa VDMP / VAMP / VFMP and Mastercard ECP / EFMP positions surfaced per connected acquirer regardless of pricing shape.
- SCA & PSD2
- Selective 3DS2 on the authorisation path keeps approval high in Europe without skipping the SCA bar.
- Transparent fee contract
- Flat-rate contracts spell out the per-transaction rate, refund-fee treatment and chargeback-fee treatment upfront in writing.
- Sanctions & AML alignment
- Sanctions screening at onboarding; AML monitoring tuned to each merchant's vertical and volume profile.
- Licensed verticals only
- Licensed gaming, regulated financial services and other compliance-bound verticals supported only where current operating licences exist. Grey and black-market verticals are out of scope regardless of pricing model.