- PCI DSS Level 1
- Annual on-site assessment plus quarterly ASV scans; sub-merchants inherit the posture across every connected gateway.
- Scheme programmes
- Visa VDMP / VAMP / VFMP and Mastercard ECP / EFMP positions per connected gateway; routing weights can rotate around at-risk lanes.
- SCA & PSD2
- Selective 3DS2 on the authorisation path keeps approval high in Europe without skipping the SCA bar.
- Bank-rail mandate posture
- NACHA authorisations for ACH, SEPA mandate IDs for SEPA Direct Debit; captured and retained per scheme rules.
- Sanctions & AML alignment
- Sanctions screening on onboarding; AML monitoring tuned per merchant vertical, volume and country mix.
- Licensed verticals only
- Licensed gaming, regulated financial services and other compliance-bound verticals supported only where current operating licences exist. Grey and black-market verticals are out of scope regardless of which connected gateway clears the auth.