- PCI DSS Level 1
- Annual on-site assessment plus quarterly ASV scans; sub-merchants inherit the posture across every booking surface.
- Scheme programmes
- Visa VDMP and Mastercard ECP positions surfaced per acquirer; routing weights rotate around at-risk lanes — important in a vertical where dispute rates run higher than the cross-vertical average.
- SCA & PSD2
- Selective EMV 3DS2 on the authorisation path keeps approval high in Europe without skipping the SCA bar on long-lead travel bookings.
- Sanctions & AML alignment
- Sanctions screening on onboarding; AML monitoring tuned per merchant vertical, volume and itinerary geography mix.
- IATA / BSP adjacency
- Where merchants operate under IATA Billing Settlement Plan rules, the platform sits alongside BSP settlement rather than replacing it — capturing card-on-file authorisations the BSP doesn't cover.
- Licensed verticals only
- Licensed travel sellers, OTAs, hospitality and corporate TMCs operating with current licences. Grey and black-market travel verticals are out of scope regardless of integration shape.