PCI DSS v4.0.1 Level 1
Duoza’s platform is a Level 1 Service Provider, the highest PCI DSS validation level.
Security & compliance
Security and compliance, built in.
A certified payment platform, a licensed acquiring bank that settles merchants directly, and onboarding checks on every merchant before the first payment.
Certified platform
Held to the card industry’s highest standard.
Global Registry of Service Providers
Listed as a Merchant Servicer on the Visa Global Registry.
The annual reassessment for the 2026–27 cycle is in progress. Current compliance documentation, certificate scope and registration status are shared during partner and merchant onboarding.
How money moves
Clear roles. Direct settlement.
Duoza runs the payment platform. The acquiring bank holds the acquiring licence and scheme membership, underwrites merchants and settles funds directly to them. Duoza never holds merchant funds in this acceptance model.
Payment
Merchant
Duoza platform
Acquiring bank
Card schemes
Settlement
Acquiring bank
Merchant · direct
Onboarding
Every merchant reviewed. Prepared for approval.
Duoza prepares each business for the acquiring bank’s review. Approval and activation depend on the bank’s assessment and applicable requirements.
- 01
Merchant signup
The business shares its profile, ownership and payment needs.
- 02
Duoza KYB preparation
Duoza prepares a complete know-your-business file.
- 03
Bank underwriting
The acquiring bank reviews the application and decides on approval.
- 04
Start processing
Once approved, channels can be activated for payments.
Operations
Tools for safer payments.
3-D Secure
Cardholder authentication support for online payment journeys.
Monitoring
Payment activity is monitored alongside the acquiring bank.
Chargeback support
Dispute evidence is coordinated with acquiring-bank follow-up.
Reporting
Merchant reporting supports review and reconciliation.
Licensing
Licensed partners today. Our own pathway next.
Licensed partner model
Duoza operates through licensed acquiring, banking and card-programme partners, each with its own defined responsibilities.
Category III Retail Payment Services
A planned acquisition of a CBUAE-licensed payment services firm, subject to change-of-control approval, as part of Duoza’s UAE licensing pathway. Approval is not guaranteed, and licensed activity begins only once the required permissions are granted. Duoza does not hold a banking licence today.
Shared responsibilities
Security is part of launch readiness.
Responsibilities follow the payment channel and data flow. Your onboarding package covers the data-flow and security requirements for your integration.
Security guide- Use the approved integration and credential-handling guidance for your channel.
- Give access only to the people who need it, with a named credential owner.
- Keep sensitive cardholder data out of application logs and support messages.
- Test the complete payment journey, including 3-D Secure and interrupted attempts.
Compliance documentation for your review.
During onboarding, your Duoza contact shares the current compliance documentation, operating model and partner responsibilities for your setup.