- PCI DSS Level 1
- Vault, switch and tokenisation are PCI DSS Level 1 service-provider components; the food-truck operator inherits the posture without carrying separate certifications.
- PCI MPoC for SoftPOS
- Partner SoftPOS apps follow the PCI MPoC (Mobile Payments on COTS) standard for card-present transactions on commercial off-the-shelf devices.
- EMV & scheme CVM rules
- Contactless caps, PIN step-up and store-and-forward behave per Visa / Mastercard scheme rules in the operator's region.
- Sanctions & AML alignment
- Sanctions screening at onboarding; AML monitoring tuned per operator vertical and volume.
- Audit-grade event log
- Every payment attempt is logged with timestamp, operator identity, device serial and acquirer response code.
- Licensed verticals only
- Licensed food-service operators and other compliance-bound verticals supported where the operator holds the relevant trading and food-hygiene licences. Grey and black-market verticals are out of scope.