- PCI DSS Level 1
- Annual on-site assessment plus quarterly ASV scans; sub-merchants inherit the posture on the aggregator model, direct-MID merchants ride it via the platform layer.
- Scheme programmes
- Visa VDMP / VAMP / VFMP and Mastercard ECP / EFMP positions surfaced per connected acquirer; routing weights can rotate around at-risk lanes.
- SCA & PSD2
- Selective EMV 3DS2 on the authorisation path keeps approval high in Europe without skipping the SCA bar.
- AML & sanctions
- Sanctions screening at KYB; AML monitoring tuned per merchant vertical, volume and country mix; unusual-flow alerting on the ops side.
- Bank-rail mandate handling
- NACHA authorisations for ACH, SEPA mandate IDs for SEPA Direct Debit; captured and retained per scheme rules.
- Licensed verticals only
- Licensed gaming, regulated financial services and other compliance-bound verticals supported only where current operating licences exist. Grey and black-market verticals are out of scope regardless of merchant-account model.