Certifications.

Pay. has all the necessary certifications related to the secure handling of payment data and consumer data.

PCI-DSS
Pay. is PCI-DSS certified. The Payment Card Industry Data Security Standard (PCI-DSS) is a security standard for organizations that store and process cardholder data. The purpose of the certification is to protect data, limit fraud and reduce the risk of a data breach.

GDPR
Pay. meets all requirements regarding the safe handling of data. Data is stored on Dutch data centers. We only collect data that we need for processing payments. For more details see our privacy statement

ISAE 3402
Pay. is ISAE 3402-certified. The International Standard for Assurance Engagements (ISAE 3402) statement reports annually on the reliability of the payment processing process by an independent IT auditor. This audit ensures that we meet the highest international standards in risk management and internal control.

ISO 27001:2022
Pay. is NEN-EN-ISO/IEC 27001:2022 certified. The NEN-EN-ISO/IEC 27001:2022 is an internationally recognized standard for information security management. This standard sets specific requirements for establishing, implementing, executing, controlling, assessing, maintaining and improving a documented Information Security Management System (ISMS) within the context of the organization.

The purpose of this certification is to protect confidential data, ensure the integrity of corporate data and guarantee the availability of IT services. It also helps us comply with legal and regulatory requirements and take a proactive approach to managing information security risks.

At Pay. we are committed to ensuring the security and privacy of our customer data. With the NEN-EN-ISO/IEC 27001:2022 certification, we underscore our commitment to implement and maintain best practices in information security. This helps us limit fraud, reduce the risk of a data breach and ensure the security of our services.