IBTx.ai Achieves PCI DSS v4.0.1 Validation for SaaS Payments
Independent validation of our payment security.
Effective Date
01 July 2026
Last Updated
01 July 2026
1. Validation Overview
With more than 1 million transactions processed annually, IBTx.ai places security at the center of its platform operations. Although our system architecture is designed to avoid storing sensitive cardholder information, we have had our payment services independently assessed against PCI DSS v4.0.1 as a service provider.
1M+
Transactions processed annually
v4.0.1
PCI DSS Certificate of Validation, issued by an independent QSA
6
Supported payment provider integrations assessed
PCI DSS (Payment Card Industry Data Security Standard) is a globally recognized security standard designed to protect payment card information. This validation confirms that an independent security assessor has evaluated our systems against rigorous international payment security requirements.
Whether customers accept payments through order forms, invoices, payment links, ecommerce stores, or subscription billing, the IBTx.ai payment services supporting these transactions, including our integrations with all six supported payment providers, have undergone independent security assessment.
2. What This Means for Our Customers
- IBTx.ai has been assessed as a service provider. This provides several important benefits for customers using our platform:
● Documented Compliance Evidence: Businesses that depend on third-party payment services are generally required to review their providers’ compliance status annually. This validation, documented in our PCI DSS Attestation of Compliance (AOC), provides our customers with independent documentation to support those reviews.
● Simplified Vendor Assessments: When your own prospective or existing customers ask about the security of your payment platform, you can share the relevant validation documentation as evidence of the independent assessment.
● Greater Enterprise Confidence: Payment security validation adds to our SOC 2 Type II milestone, providing additional independent security evidence that can be referenced in vendor assessments, enterprise security questionnaires, and procurement discussions.
3. Our Commitment to Payment Security
“Although our system architecture is designed not to store cardholder information, we have proactively pursued this validation because maintaining a high standard of security is fundamental to our platform.
Every payment processed by our customers represents the trust their own customers place in them. By validating our payment services against the PCI DSS v4.0.1 standard, we have enabled an independent assessor to evaluate the security measures protecting that trust.”
- Jai Mulani, Chief Executive Officer, IBTx.ai
