We are very happy to announce that we obtained the PCI-DSS 4.0 certification, the new version of this global standard. That's right, we are one of the first companies in Latam to have this version of the certification, staying true to our Pomelo speed! This is a significant achievement and a testament to our commitment to data protection and the privacy of our customers. Let's take a closer look at its importance in strengthening our value proposition towards the fintech ecosystem!
What is the PCI-DSS 4.0 certification?
PCI-DSS (Payment Card Industry Data Security Standard) is the security standard in payment media and a mandatory global regulation established by the main credit and debit card brands, aimed at ensuring the integrity and confidentiality of data. This certification is required and mandatory to operate in this market. In May 2022, we had already met the necessary requirements to certify level 1 of PCI-DSS version 3.2.1, launched in 2018. And we also achieved it in record time!
In May of this year, we set ourselves the great challenge of certifying the new version of the standard (4.0), which currently presents very important technical improvements. Although the requirements to achieve it are extremely high and we have enough time to continue operating with the previous version, at Pomelo we did not want to wait to offer this new layer of protection for our customers.
Why is it so important for Pomelo to apply for the latest version of PCI-DSS?
The decision to apply ahead of time for the new version of PCI-DSS involved adapting various processes, controls, and the hard work of several teams, always aiming to be at the forefront of security topics. For weeks, we formed an immense team dynamic from our InfraCyber, Payment Processor, Issuing, and Data Protection verticals, where evidence collection, key stakeholder interviews, documentation organization, and other tasks were carried out.
This entire procedure was carried out with the goal of aiming for continuous improvement of our processes and reaching the new version of this regulation in terms that set a precedent for all of Latin America. PCI-DSS 4.0 offers numerous technical improvements for our products, among which we highlight:
End-to-end communication encryption;
Stricter user authentication requirements
We will soon share more technical details about this achievement accomplished in record time. Congratulations to all teams involved in this incredible milestone that will take our card technology to another level across Latam!