PCI DSS Compliance

Every DECTA product, from issuer and acquirer processing to the white label payment gateway and card issuing, is built on a PCI DSS Level 1 certified infrastructure, independently audited by a Big Four firm. This means your card programmes, merchant services, and cardholder data operate within the most rigorous security standard in the payments industry, without placing that compliance burden on your own team.

Build on Certified Infrastructure

Launch your card programme or acquiring operation on a PCI DSS Level 1 certified, Big Four audited foundation from day one.

Talk to Our Team

The Highest Level of Certification, Across Every Product

PCI DSS Level 1 is the most stringent tier of the Payment Card Industry Data Security Standard, applying to organisations that process the largest volumes of card transactions. DECTA holds this certification across its full suite of processing services and undergoes independent verification by a Big Four auditor on an ongoing basis.

Whether you are running a Mastercard or Visa issuing programme, operating an acquiring service, or launching a white label payment gateway, you are building on infrastructure that has already passed the industry's most demanding security assessment.

Tokenization That Reduces Your Compliance Scope

DECTA EMV payment tokenization replaces sensitive cardholder data with a secure payment token throughout the transaction flow, meaning raw card details are never exposed in your environment. This directly reduces the scope of your own PCI DSS compliance obligations. The service is certified by both Mastercard MDES and Visa VTS, the two principal token service platforms recognised by the card schemes.

  • Sensitive cardholder data replaced with secure tokens at the point of transaction
  • Certified by Mastercard MDES and Visa VTS token service platforms
  • Applied consistently across issuer processing, acquirer processing, and the white label gateway
  • Card personalisation data delivered securely to certified personalisation bureaus

Authentication and Fraud Controls Built to Scheme Standards

DECTA implements the full 3D Secure 2.2 protocol across issuer and acquirer processing services, covering PSD2 Strong Customer Authentication requirements and Mastercard's mandate for biometric cardholder authentication. Out-of-band biometric authentication is supported via a dedicated DECTA app.

Fraud and risk management workflows are designed to comply with major payment scheme requirements and international AML authority standards, with detailed reporting available to support ongoing internal audit and scheme compliance reviews.