- PCI DSS Level 1
- Vault, switch and tokenisation are PCI DSS Level 1 service-provider components; sub-merchants inherit the posture across every geography including the Nigeria panel.
- CBN-licensed partners
- Nigerian connectivity is delivered through partner acquirers and PSPs licensed by the Central Bank of Nigeria; topropay does not hold a direct CBN licence.
- Scheme rules
- Visa VDMP / VAMP / VFMP and Mastercard ECP / EFMP thresholds are respected on the card side; per-acquirer position is surfaced in the dashboard.
- Sanctions & AML alignment
- Sanctions screening at onboarding; AML monitoring tuned per merchant vertical, volume and country mix, including Nigeria-facing traffic.
- Audit-grade event log
- Every payment attempt on the Nigeria panel — successful or not — logged with timestamp, actor identity (where authenticated) and partner response code.
- Licensed verticals only
- Licensed gaming, licensed financial services and other compliance-bound verticals supported only where current operating licences exist. Grey and black-market verticals are out of scope regardless of geography.