Company

We obtained the PCI-DSS 4.0 certification!

We obtained the PCI-DSS 4.0 certification!
Share

We are very happy to announce that we obtained the PCI-DSS 4.0 certification, the new version of this global standard. That's right, we are one of the first companies in Latam to have this version of the certification, staying true to our Pomelo speed! This is a significant achievement and a testament to our commitment to data protection and the privacy of our customers. Let's take a closer look at its importance in strengthening our value proposition towards the fintech ecosystem!

What is the PCI-DSS 4.0 certification?

PCI-DSS (Payment Card Industry Data Security Standard) is the security standard in payment media and a mandatory global regulation established by the main credit and debit card brands, aimed at ensuring the integrity and confidentiality of data. This certification is required and mandatory to operate in this market. In May 2022, we had already met the necessary requirements to certify level 1 of PCI-DSS version 3.2.1, launched in 2018. And we also achieved it in record time!

In May of this year, we set ourselves the great challenge of certifying the new version of the standard (4.0), which currently presents very important technical improvements. Although the requirements to achieve it are extremely high and we have enough time to continue operating with the previous version, at Pomelo we did not want to wait to offer this new layer of protection for our customers.

Why is it so important for Pomelo to apply for the latest version of PCI-DSS?

The decision to apply ahead of time for the new version of PCI-DSS involved adapting various processes, controls, and the hard work of several teams, always aiming to be at the forefront of security topics. For weeks, we formed an immense team dynamic from our InfraCyber, Payment Processor, Issuing, and Data Protection verticals, where evidence collection, key stakeholder interviews, documentation organization, and other tasks were carried out.

This entire procedure was carried out with the goal of aiming for continuous improvement of our processes and reaching the new version of this regulation in terms that set a precedent for all of Latin America. PCI-DSS 4.0 offers numerous technical improvements for our products, among which we highlight:

  • End-to-end communication encryption;
  • Stricter user authentication requirements

We will soon share more technical details about this achievement accomplished in record time. Congratulations to all teams involved in this incredible milestone that will take our card technology to another level across Latam!

ABOUT THE AUTHOR
Team Pomelo

Team Pomelo

We are a team of specialists in the payments industry behind the voice, or rather, the Words of Pomelo. We will tell you everything about the industry, trends, products, methodologies, best practices, and Pomelo stories in the first person.

View more articles from this author
Let's talk

Build the solution
your business needs

Talk to our team and get started faster.

Cecilia BrittoHead of Business Development
Alfonso TorreguitarHead of Global Solutions
Santiago WitisCountry Manager LATAM South Cone
Jacob LevinCountry Manager Mexico
Rafael GoulartCountry Manager Brazil
Paula BarnesHead of Risk & Compliance
Emilia SerranoNew Businesses Director
Contact us