Legal · Compliance

Licenses and certifications.

Audited annually. Reports available under NDA.

PCI DSS Level 1

Audited by Coalfire · expires Aug 2026

SOC 2 Type II

Audited by Marcum · annual report

ISO 27001:2022

Certified by BSI · valid until 2027

State money transmitter

Licensed under applicable U.S. state money transmission laws

CCPA & GDPR

DPA available on request via privacy@zonipay.io

3-D Secure 2.3

Certified across Visa, Mastercard, Amex, Discover