01
Pay-me
Payment gateway
PCI DSS, PCI 3DS and its first PCI PIN certification
We took Pay-me through 3 straight years of PCI DSS and PCI 3DS recertification, its first PCI PIN certification, and the migration from version 3.2.1 to 4.0.1.
Compliance consulting · payments in Latin America
We own your cybersecurity compliance so you keep transacting.
We design, monitor and internally audit your compliance with PCI DSS, ISO 27001 and Personal Data Protection, and we answer for it before the auditor.
For a payments business in Latin America, compliance isn't paperwork: it's your license to keep transacting.
15 years
In CISO roles for payments and fintech companies.
32 of 32
Audits passed in the last 3 years.
We defend your management system before the certifier.
We've worked with
Payments industry
Other regulated sectors
* Brands and logos are the property of their respective owners; their use does not imply affiliation or endorsement.
/ Services
Your cybersecurity program, audit-ready.
We cover the three regulations a payments business answers to (PCI DSS, ISO 27001 and the Personal Data Protection Law), integrated into a single management system.
Design & implementation
We build your PCI DSS, ISO 27001 and/or Personal Data Protection management system from wherever you are today.
Monitoring & upkeep
We keep your management system running between assessments so compliance doesn't drift.
Internal audit
We assess your system with the same rigor as the certifier and help you close the gaps before the audit.
We answer for you at the audit
We represent you before the external auditor and drive the remediations, all the way to the certificate.
We cover each standard in full, including penetration testing (PCI DSS Req. 11.4) and your team's technical training (Req. 6.2.2, 12.6).
/ Cases
Payment processors that got certified and keep transacting.
Real client cases: implementations and certifications that keep operations running and enable regional expansion.
02
Alignet
Acquirer
Visa, Mastercard and personal data-protection compliance
We have operated Alignet's compliance with the Visa and Mastercard rules (Visa Core Rules and the Mastercard Rules) for 3 straight years, and implemented its alignment with the Personal Data Protection Law.
03
Bizlinks
E-invoicing
ISO 27001, recertified and migrated to the 2022 edition
We run its Information Security Management System; over 3 years we have kept it recertified to ISO 27001 and migrated it to the 2022 edition.
04
Big Idea Network
Payment gateway
Payment operations across 3 countries
We set up Big Idea Network's payment operations in Peru, Chile and Colombia, sustaining for 3 straight years the compliance required to transact with high-risk and gambling merchants.
/ Team
One industry, and we know it from the inside.
We're a team of 11 specialists with 15 years leading cybersecurity teams in the payments industry, and the certified expertise to back it.
- —We're specialists, not generalists.We work in payments, with just three standards: PCI DSS, ISO 27001 and Personal Data Protection. We don't touch the rest.
- —We come from your industry.We have led cybersecurity teams (as CISOs) inside payment processors, acquirers and fintechs: the same responsibility you carry today.
- —One system, not three.We integrate PCI DSS, ISO 27001 and Personal Data Protection without duplicating controls or processes, so you move faster with less internal load.
- —We're independent from whoever assesses you.We prepare your compliance and present it to the auditor; no conflict of interest.
- —We're people, not software.Software collects your evidence, but it won't design your system or stand behind it before the auditor. We do, in every certification.
Team credentials
/ Contact
A first 30-minute conversation.
- You tell us your scope, timeline and constraints.
- We tell you frankly whether we're the right provider for your case.
- If you ask, we sign a mutual NDA before the meeting.