tapXphone Earns PCI MPoC Certification for A&M Services

August 8, 2024 

In July 2024, tapXphone successfully completed the certification process for PCI MPoC Attestation and Monitoring (A&M) Services. This compliance confirms that tapXphone ensures a secure way of accepting payments on user devices. As a result, tapXphone became the sixth solution in the world to meet the stringent requirements of this standard.

The Attestation and Monitoring Services Certification is one of the key security requirements within the PCI MPoC standard. This means that a mobile device must be continuously assessed for an adequate level of security to handle sensitive data and perform contactless banking transactions. This ensures the secure processing of confidential data, including Personal Account Number (PAN), PIN codes, and other information.

tapXphone offers its own approaches and algorithms for collecting, interpreting, and analyzing application environment data. They fully comply with modern security requirements for SoftPOS solutions. Therefore, being one of the first in the world to achieve this certification confirms tapXphone’s commitment to being the most secure payment application possible.

What is MPoC Attestation and Monitoring Services Certification?

The solution’s Attestation and Monitoring System must process data from the application and apply pre-established security policies. It also helps detect, notify, and mitigate the consequences of potential or actual threats and attacks on the application or user devices.

The tapXphone’s Attestation and Monitoring System processes data from various MPoC applications, ensuring the security of tapXphone partner applications and providing timely detection and response to unauthorized actions.

Meeting high security control requirements is challenging. In addition to addressing security issues, it is crucial to maintain a high level of user experience and transaction speed. Therefore, one of the key indicators of a well-designed system is the speed of decision-making. The system must be able to make security decisions as quickly as possible for each specific action.

How Does A&M System Work?

From the moment the application is launched and especially before each transaction is carried out, a continuous process of collecting numerous parameters takes place. The Attestation and Monitoring System interprets and analyzes these parameters at various levels according to defined security policies. This process helps assess the risk and decide whether to proceed with the transaction or action in the application.

The Attestation and Monitoring System developed by the tapXphone team contains unique algorithms and security policies. The team continuously monitors emerging threats, improves algorithms and policies, and optimizes system performance.

Vadzim SmatrayeuVP Fintech Services at IBA Group

smotryaev2

We are developing a highly flexible product designed to meet the needs of the most demanding customers. As a result, the Attestation and Monitoring System within tapXphone can function as an independent module, which we have separated into a standalone service. This opens up new opportunities for our potential partners who want to create their own SoftPOS solutions based on tapXphone.

What MPoC Certificates does tapXphone Have?

In May 2024, tapXphone proudly received two prestigious certificates: MPoC Software Application and MPoC Isolated SDK. This accomplishment places tapXphone among the first 10 solutions in the world to achieve these certifications, highlighting our dedication to top-tier security and innovation.

To dive deeper into what tapXphone has to offer, click here.