Compliance

Compliance & certifications.

P26M is built to PCI DSS v4.0.1 requirements and is GDPR aligned. Formal certification is in progress — current documentation is available to verified merchants on request.

  • PCI DSS v4.0.1 ready
  • GDPR
  • SOC 2 — In progress
Certifications

What we hold and what we're building toward.

  • PCI DSS v4.0.1

    In progress

    Platform is built to PCI DSS v4.0.1 requirements — cardholder data storage, tokenization, network segmentation and all PSP integrations are in scope. Formal QSA assessment is under way; we are not yet certified.

  • GDPR

    Active

    EU data residency (AWS eu-central-1). Data Processing Agreement available. DPO appointed. No cross-border transfers of personal data outside the EEA.

  • SOC 2 Type II

    In progress

    Audit in progress. Expected completion Q4 2026. Covers Security, Availability, and Confidentiality trust service criteria.

  • ISO 27001

    Planned

    Planned for 2027 following SOC 2 completion. ISO 27001 controls are already partially implemented as part of our PCI DSS readiness program.

Talk to sales

Book a call with the team.

Thirty minutes on your current providers and the markets you sell in.

  • PCI DSS v4.0.1 ready
  • EU-hosted, GDPR ready
Countries
21
Providers
141
in the catalogue
Payment methods
62
offered by providers

Intro call · 30 min

Format
Video call
Length
30 minutes

On the call

  • Your current providers and how payments run today
  • Which providers fit your country and payment methods, and their status
  • Your routing: which rules you would set first

After the call you get

  • A list of providers that fit you, each marked Connected or On request
  • For Connected providers: what to sign with the provider, and the 1–3 day switch-on
  • For On request providers: the timeline we agreed on the call
Book a call (opens in a new tab)

or write to sales@p26m.com