As the first Iranian company in the field of electronic and banking payment, TOSAN Techno company received PCI PA-DSS certification for Techno SIPA payment switch.

The certification was granted to Techno SIPA after nearly a year and a half of PCI SSC implementation of the Requirements Implementation process and two stages of in-person evaluation by its official auditors. PCI SSC has been awarded the certification by TOSAN Techno as a global trustee and official reference to the card and payment industry standards.

One of the security certifications in this industry provided by PCI SSC is the PCI PA-DSS certification, which is specific to any payment application that stores, processes, or transfers cardholder data. From the standpoint of PCI SSC, such software must meet a series of fourteen requirements to be able to obtain this certification. These requirements start from the routine analysis phase and are evaluated until the software is implemented. In fact, these requirements ensure that all information is transmitted in a secure and completely encrypted environment. On the other hand, any bank or PSP that wishes to use this payment software will consider having this certificate first. In the international market, if a company intends to provide payment software, it must first meet the requirements of the PCI SSC and obtain this certification.

Another PCI SSC certification is the PCI PTS certification, which specializes in electronic payment hardware modules, and is required by any company that manufactures payment equipment to the global standard. For example, PAX, which is the sole representative of TOSAN Techno in Iran, now offers its products with PCI PTS certification.

It is important to note that the internal authority for payment security clearance is Shaparak. All payment software inside Iran is reviewed and evaluated annually within the security requirements and standards of Shapark Company and this process is performed on an ongoing basis. However, getting PCI SSC certification due to its stringent requirements and its compliance with sophisticated security standards is an essential and difficult task for TOSAN Techno as the first Iranian company to do so.

TOSAN Techno has been able to obtain this certification in the absence of any Iranian company. TOSAN Techno is thus the first company to now produce and deliver PCI PTS-certified payment terminals, and now also has the PCI PA-DSS certification for the Techno SIPA Switch Switch product.

With the PCI PA-DSS certification for Techno SIPA Switch, the company is now able to build a more secure infrastructure than ever before in Iran’s banking and electronic payment network.