Compliance Certifications

Certification	Details
PCI DSS	Coda Payments processes fewer than the threshold of 6 million credit and debit card transactions required for the PCI DSS Level 1 compliance level which constitutes a minority of the transactions processed by our Codashop users. Coda Payments self-assesses its PCI DSS compliance with the SAQ A-EP form and self-attests to that compliance annually. Hence Coda Payments do not have any independent PCI certification as we work with a number of major card payments PSPs that are PCI certified.
Data Privacy regulations - GDPR, CCPA, PDPA, LGPD, etc.	Coda Payments has the required technical and organizational measures as well as policies and procedures in place such as those to provide for data subject rights requests, personal data breach notification, etc. In line with the requirements of the various data privacy regulations including EU-GDPR, Singapore PDPA, and the US CCPA
ISO 27001, SOC 2 Type II	Coda Payments is currently not certified with ISO 27001 or SOC 2.
Monetary Authority of Singapore (MAS) Technology Risk Management (TRM)	Coda Payments is pursuing MAS technology risk management compliance certification for fintech companies based in Singapore.