- PCI DSS Level 1
- Annual on-site assessment plus quarterly ASV scans; sub-merchants inherit the posture across every connected Mastercard acquirer.
- Mastercard scheme programmes
- ECP (Excessive Chargeback Programme) and EFMP (Excessive Fraud Merchant Programme) positions surfaced per acquirer; routing weights can rotate around at-risk lanes.
- EMV 3DS / Identity Check
- Selective Mastercard Identity Check on the authorisation path keeps approval high in Europe without skipping the SCA bar.
- MDES network tokens
- PAN replaced by MDES tokens in the vault; recurring and refund flows reference the token, not the underlying credential.
- Sanctions & AML alignment
- Sanctions screening at onboarding; AML monitoring tuned per merchant vertical, volume and channel mix.
- Licensed verticals only
- Licensed gaming, regulated financial services and other compliance-bound verticals supported only where current operating licences exist. Grey and black-market verticals are out of scope.