PayCore.io has completed an annual PCI DSS assessment using an approved Qualified Security Assessor (QSA). The auditor reviewed PayCore.io environments, which include validating the infrastructure, development, operations, management, support, and in-scope services. PayCore.io is certified as a service provider compliant with PCI DSS version 3.2.1. The assessment results in an Attestation of Compliance (AoC), which is available to customers issued by the QSA. The effective period for compliance begins upon passing the audit and receiving the AoC from the assessor and ends one year from the date the AoC is signed.
Customers who want to utilise our PCI-ready white-label gateway can use these validations across many of the underlying components, thereby reducing the effort and costs of obtaining their own PCI DSS certification. PayCore.io significantly simplifies the PCI burden for both merchants and institutional customers. It is essential to understand that PCI DSS compliance status for PayCore.io does not automatically translate into PCI DSS certification for the services customers provide using our platform. Customers are responsible for ensuring compliance with PCI DSS requirements.