Mypinpad achieves validation against PCI MPoC v1.0 across all three sub-programmes

Mypinpad is listed and validated against PCI MPoC v1.0 across all three sub-programmes: Software, Solution, and Attestation & Monitoring Services.

Every PCI listing is a matter of public record. The PCI Security Standards Council publishes a searchable registry of validated MPoC products — ours and every other vendor's — so any buyer can check which sub-programmes a vendor holds, which version they are validated against, and the scope of that validation.

What the three sub-programmes cover

PCI MPoC (Mobile Payments on COTS) defines rigorous requirements for software-based payment acceptance. The three sub-programmes are distinct:

• Solution — the overall payment acceptance solution meets PCI MPoC requirements
• Software — the software components are independently certified
• Attestation & Monitoring Services — the security monitoring and attestation services meet the standard's ongoing requirements

Holding all three means every layer has been independently assessed, not only the top-level solution. A vendor validated for one sub-programme and a vendor validated for three can both accurately say they are MPoC validated — the registry shows the difference, and that difference lands in the customer's compliance scope.

Why this matters for customers

For acquirers, PSPs and banks embedding Mypinpad under their brand:

• Continuous security monitoring is included in the platform, not bolted on
• The scope of what the validation covers is stated and checkable
• Talk to us about your deployment and we will confirm the scope and what is required for it

MPoC compliance is complex for most organisations. For Mypinpad, it is routine.