Skip to Content

  

Icon tablet terminal

TRADITIONAL MPOS (SCR, SCRP, PA-DSS)

  

Icon tablet with a signature

Pin on Glass (SPOC)

  

Icon card tapping on phone

Tap on Phone (CPOC)

Please visit the PCI Security Standards website for more information on CPOC compliant solutions.

  

Icon a checkmark

Pilot Ready

Information presented via a web-link was provided by the respective Solution Provider. Mastercard makes no representations or warranties as to the accuracy and completeness of such information. Please contact the Solution Provider directly with any questions or for more information.

*This directory is not exhaustive and includes Mastercard MPOS Program registered providers (Traditional MPOS), PCI certified providers (Pin on Glass and Tap on Phone) and providers approved to pilot on the Mastercard network (Pilot Ready).

Assist

Certifications
PCI-DSS

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
No

Security mechanism

  • Trusted Execution Environment (TEE)
  • Secure Element (SE)

Hosting options
We provide our solution for the Russian Federation and the Republic of Belarus

Tap on Phone options
Android application

Value-added services offered
Digital receipt

Minimum OS and device requirements
Android V8.1 hardware backed keystore

Certifications
EMV (L2)

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
Yes

Security mechanism
White-box cryptography

Hosting options
Cloud hosted

Tap on Phone options
White Label, SDK, Deep Link (wrapper)

Value-added services offered
QR payment acceptance

Minimum OS and device requirements
Android V7.0 and above

Cellfie

Certifications
EMV (L2)

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
No

Security mechanism
White-box cryptography

Hosting options
Cloud hosted

Tap on Phone options
White Label, SDK, Deep Link (wrapper)

Value-added services offered
QR payment acceptance

Minimum OS and device requirements
Android Oreo Version 8.0

Center of Corporate Technologies

Certifications
EMV (L2), PCI-DSS, PIN security

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
No

Security mechanism
Cryptographic keys are stored in the Android Keystore

Hosting options

  • On-premise in country
  • Cloud hosted

Tap on Phone options
White Label, SDK, Deep Link (wrapper)

Value-added services offered
QR payment acceptance

Minimum OS and device requirements
Android V8.1

Dejamobile

Certifications
EMV (L2), PCI-DSS

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
Yes

Security mechanism
White-box cryptography

Hosting options
Cloud hosted

Tap on Phone options
White Label, SDK, Deep Link (wrapper)

Value-added services offered
Management web portal, device and apps monitoring, reporting module, Android ECR app (through partners)

Minimum OS and device requirements
Android V8.0

IBA Group a.s.

Certifications
EMV L2, PCI CPoC, PCI-DSS, SPoC GAP analysis

Integrated with Mastercard Payment Gateway Services (MPGS)
Yes

GDPR compliant
Yes

Security mechanism
Cryptographic keys are stored in the Android Keystore (Trusted Execution Environment if hardware-backed)

Hosting options

  • On-premise in country
  • Cloud hosted

Tap on Phone options

  • White Label
  • Deep Link (wrapper)
  • Other: tapXphone can be used as a standalone application or can provide App2App integration via API

Value-added services offered
Digital onboarding via API, reporting, digital receipt, developing installments and loyalty

Minimum OS and device requirements
Android V8.0

Ingenico

Certifications
EMV (L2), SPoC, CPoC, PCI-DSS

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
Yes

Security mechanism
White-box cryptography

Hosting options
Hybrid cloud-based + hosted at Ingenico DC

Tap on Phone options
White Label, SDK, Deep Link (wrapper)

Value-added services offered
Reporting and digital receipt when solution includes the payment gateway (such as with Ingenico One)

Minimum OS and device requirements
Android V8.1+

MAYASOFT LLC

Certifications
EMV (L2), PCI-DSS, Mastercard Contactless certification

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
No

Security mechanism
Trusted Execution Environment (TEE)

Hosting options
On-premise in country

Tap on Phone options
Stand-alone product

Value-added services offered
Reporting

Minimum OS and device requirements
Smartphone with Android V8.0 and NFC

MYPINPAD Ltd

Certifications
EMV (L2), PCI SPoC, PCI CPoC, PCI-DSS, PCI PIN, Tap on Phone PIN Waiver

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
Yes

Security mechanism
White-box cryptography

Hosting options
Cloud hosted

Tap on Phone options
White Label, SDK

Value-added services offered (limit to 2)
White-label PCI solution and waiver solutions offered as companion app or SDK. Cloud platform provides for banking app (ID & V) and Tap-in-App solutions in addition to Tap on Phone and PIN on Phone.

Minimum OS and device requirements
Android Version 8.0 and above

myPOS

Certifications
EMV (L2), PCI-DSS

Integrated with Mastercard Payment Gateway Services (MPGS)
Yes

GDPR compliant
Yes

Security mechanism
White-box cryptography

Hosting options
Cloud hosted

Tap on Phone options
White Label

Value-added services offered (limit to 2)
Every free myPOS merchant account gets a free Mastercard or Visa business card, a free multi-currency e-money account, QR Payment acceptance, a cash register in the same app, access to online payment acceptance functionalities such as payment requests, payment links and buttons, access to myPOS Online to open an e-commerce website in just a few clicks, invoicing and many more.

Minimum OS and device requirements
Android Version 8.0 and above

PayCore

Certifications
EMV (L2), PCI-DSS

Integrated with Mastercard Payment Gateway Services (MPGS)
Yes

GDPR compliant
Yes

Security mechanism

  • Product 1: General NFC Android devices via white-box cryptography
  • Product 2: Samsung-only devices (if requested); solution also runs on the Samsung Knox platform

Hosting options

  • On-premise in country
  • Cloud hosted
  • AWS Cloud or PayCore Datacenter

Tap on Phone options
White Label, SDK

Value-added services offered
Loyalty, inventory management, reporting, digital receipt, QR payment, payment link via MPGS

Minimum OS and device requirements
V4.4.2+ (without PIN) / V8.1 and above (with PIN)

Phos

Certifications
EMV (L2), PCI-DSS

Integrated with Mastercard Payment Gateway Services (MPGS)
Yes

GDPR compliant
Yes

Security mechanism

  • White-box cryptography
  • Trusted Execution Environment (TEE)

Hosting options

  • On-premise in country
  • Cloud hosted

Tap on Phone options
White Label, SDK, Deep Link (wrapper)

Value-added services offered
Digital onboarding and TMS

Minimum OS and device requirements
Android V8.1

Provision

Certifications
EMV (L2), Tap on Phone with PIN Pilot Certification

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
Yes

Security mechanism
White-box cryptography

Hosting options

  • On-premise installation
  • Cloud installation

Tap on Phone options
White Label, SDK, App-to-App Deeplink Solution

Value-added services offered
Not available

Minimum OS and device requirements
Android OS V5.0 and above, NFC chip availability on the device

Rubean

Certifications
EMV (L2), PCI-DSS, PCI CPoC

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
Yes

Security mechanism
White-box cryptography

Hosting options
Cloud hosted

Tap on Phone options
White Label, SDK

Value-added services offered
Digital onboarding

Minimum OS and device requirements
Android V8.0+

Smartfin JSC

Certifications
EMV (L2), PCI-DSS, Security assessment by Riscure

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
No

Security mechanism
White-box cryptography, DexGuard solution, hardware keystore, google SafetyNet and so on.

Hosting options

On-premise in country

Other: Our company provides an intermediary host deployed in our area that is PCI DSS certified. This host has connection to partners for acquiring purposes.

Stand-alone host deployment is also possible (inside of perimeter of some PCI DSS certified partner (bank))

Tap on Phone options
Android application that can be used as stand-alone solution or can be called by external application for secure transaction processing.

Value-added services offered
QR Payment Acceptance

Minimum OS and device requirements
Android V9.0

Softpay.io

Certifications
EMV (L2), PCI-DSS

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
Yes

Security mechanism

  • White-box cryptography
  • Trusted Execution Environment (TEE)

Hosting options
Cloud Hosted

Tap on Phone options
White Label, SDK

Value-added services offered
Loyalty, Digital Receipt

Minimum OS and device requirements
Android V8.0

SoftPos

Certifications
EMV (L2), PCI-DSS

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
Yes

Security mechanism
Hard-backed keystore + white-box cryptography

Hosting options

  • On-premise in country
  • Cloud hosted
  • In bank’s data center

Tap on Phone options
White Label, SDK, Deep Link (wrapper)

Value-added services offered
Digital receipt

Minimum OS and device requirements
Android V8.0

Soft Space

Certifications
EMV (L2), SPoC, CPoC, PA-DSS, PCI-DSS, PCI PIN

Integrated with Mastercard Payment Gateway Services (MPGS)
Yes

GDPR compliant
Yes

Security mechanism
White-box cryptography

Hosting options

  • On-premise in country
  • Cloud hosted

Tap on Phone options
White Label, SDK, Deep Link (wrapper)

Value-added services offered
Loyalty, digital receipt, QR payment, POS

Minimum OS and device requirements
Android V8.0 and above
NFC and equipped with Google Mobile Services (GMS)

Symbiotic

Certifications
EMV (L2), PCI CPoC

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
Yes

Security mechanism

  • Trusted Execution Environment (TEE)
  • Secure Element (SE)

Hosting options
Cloud hosted

Tap on Phone options
White Label, SDK, Deep Link (wrapper)

Value-added services offered
Disruptive artificial intelligence object recognition, digital onboarding, integrated loyalty program, inventory and stock management, reporting, digital receipt, QR and push payments using Mastercard Send

Minimum OS and device requirements
Android V8.0

Synthesis

Certifications
EMV (L2)

Integrated with Mastercard Payment Gateway Services (MPGS)
Coming soon

GDPR compliant
Yes

Security mechanism

  • Trustonic Hybrid SDK
  • White-box cryptography (Intertrust)

Hosting options
Public Cloud (AWS)

Tap on Phone options
Tap on Phone SDK (for integrators), Whitelabel SoftPOS

Value-added services offered
In-app onboarding, digital receipts, QR acceptance

Minimum OS and device requirements
Android V7.0

TECHNO Llc.

Certifications
EMV L2, PA-DSS, Security Evaluation with PIN Capturing

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
No

Security mechanism
Trusted Execution Environment (TEE)

Hosting options

  • On-premise in country
  • Cloud hosted

Tap on Phone options
White Label, SDK

Value-added services offered
QR payment acceptance

Minimum OS and device requirements
Android V8.0+

Uvik Technologies PVT LTD

Certifications
EMV (L2), PCI-DSS

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
Yes

Security mechanism

  • Trusted Execution Environment (TEE)
  • SafetyNet Attestation and Key Attestation

Hosting options

  • On-premise in country
  • Cloud Hosted

Tap on Phone options
White Label, SDK, Deep Link (wrapper)

Value-added services offered
Digital Onboarding, eKYC, Loyalty Acceptance, NCMC, Inventory Solutions, Data Mining, Digital Receipts and Charge-Slips, QR and UPI Payments

Minimum OS and device requirements
Android V9.0 and above

Viva Payment Services SA (Viva Wallet)

Certifications
EMV (L2), PCI-DSS

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
Yes

Security mechanism
White-box cryptography

Hosting options
Cloud hosted

Tap on Phone options
White Label, SDK, Deep Link (wrapper)

Value-added services offered
Digital onboarding, digital receipt, QR payment acceptance, other domestic and international payment schemes

Minimum OS and device requirements
Android V8.1+

WIZZIT Digital

Certifications
EMV (L2), PCI-DSS

Integrated with Mastercard Payment Gateway Services (MPGS)
No

GDPR compliant
Yes

Security mechanism
White-box cryptography

Hosting options

  • On-premise in country
  • Cloud hosted
  • Hosted by WIZZIT out of South Africa

Tap on Phone options
White Label, SDK, Deep Link (wrapper)

Value-added services offered
Digital receipt, QR, full merchant in a box retail POS solution

Minimum OS and device requirements
Android V7.0