Overview
Vistra’s Global Expansion Platform is now PCI DSS SAQ‑A compliant, affirming our commitment to world-class data security standards in the handling of payment-related activities. This milestone complements our existing ISO 27001 certification and enhances trust in our payment infrastructure.
🚀 Key Takeaway: Our platform now meets stringent global standards for secure payment processing—ensuring data protection, compliance, and peace of mind for all clients engaging in payment workflows.
What is PCI DSS SAQ‑A?
PCI DSS (Payment Card Industry Data Security Standard) is the global benchmark for safeguarding payment card data.
SAQ‑A applies to service providers that do not store, process, or transmit full cardholder data but support merchants through hosted, redirect, or outsourced services. Achieving SAQ‑A compliance confirms that our platform and associated processes maintain rigorous controls to protect cardholder data.
What this means for you
🔒 Secure Payment Infrastructure
Fully aligned with PCI DSS SAQ‑A controls
No storage or processing of full cardholder data on our platform
Encrypted, redirect-based payment flows through certified providers
🛡️ Trust & Regulatory Alignment
Reinforces adherence to global data protection standards
Supports regulatory compliance across jurisdictions
Complements existing ISO 27001 certification
⚙️ Secure by Design Architecture
Cardholder data is never stored or directly accessed; all payment components operate in isolated, secure environments
Integration paths designed to minimise PCI scope and maximise security.
Infrastructure is independently audited by third-party experts and continuously monitored to ensure ongoing compliance with industry standards
🔐 Enterprise-Grade Security Framework
AES-256 encryption at rest; TLS 1.2+/HTTPS for data in transit
Role-based access control (RBAC), Multi-Factor Authentication (MFA)
SSO support for SAML, Google logins
Proactive security measures: vulnerability scans, ASV scans, annual third-party pen tests
Organisational policies: staff training, background checks, incident response, logical segregation
Summary
PCI DSS SAQ‑A compliance marks a significant milestone in Vistra’s security-first approach to platform development. Clients can now transact with confidence knowing their payment data is protected by world-class controls.
Learn more
Explore our Trust Centre for comprehensive security and compliance documentation, including PCI DSS SAQ‑A materials.
📖 Read: Vistra Trust Centre
For more information on our security practices or to access specific documentation, please contact our support team.
📩 Contact: [email protected]