ES
EN
ZH
PCI DSS Level 1
We hold the highest security certification in the card payment ecosystem. We apply 100% of PCI DSS controls across our high transaction volumes.
Company
3 layers of anti‑fraud protection for highly secure transactions
Technology, strategies and tools that keep sensitive data safe and shield your business against fraud.
Comprehensive protection
We offer 3 security layers
Let security rest with us, while you focus on your business, with no need to implement costly anti‑fraud controls in your own platform.
We secure card data from storage through transmission.
Tokenization
We protect card data to prevent fraud, theft and misuse of sensitive information by creating random characters (tokens) that simulate each card's number (PAN).
Vault
A certified vault for encrypted storage of your clients' sensitive card information, fully compliant with PCI regulations to ensure maximum security.
Kushki's security never stops. We operate a real‑time system to identify warning signals and stop attacks before they happen.
Machine learning
Our system analyzes behavioral patterns and assigns a risk score to detect anomalies, making decisions in milliseconds and blocking highly risky transactions. Using the same techniques, genuine customers are identified and orders recognized as typical are approved.
Transaction analytics
A specialized team, together with our fraud prevention tools, runs a two‑phase analysis:
- 01
Real‑time analytics
Online monitoring of operations to identify suspicious transactions and behavioral changes as they happen. We notify merchants promptly so they can act on their anti‑fraud strategy.
- 02
Post‑transaction
We run a detailed analysis of our merchants' transactions to understand their behavior and redesign the ideal protection strategy, with the least possible impact on their customers.
To add an extra layer of security, you can ask your customer to prove their identity.
Two‑factor authentication
We authenticate your customer so the purchase is secure. To do this, we perform a micro‑charge as an authentication code, which your customer must enter on your page to complete the purchase.
3DS 2.2 authentication
The issuer handles authenticating the cardholder, shifting liability, so your business won't need to manage chargebacks.
Kushki's objectives include providing a comprehensive, secure and easy‑to‑use service.
In order to achieve this objective and provide security for the information of our clients and end users, all subsidiaries are committed to recording all events carried out within the platform, whether executed by end users or by the company's operational staff.
Additionally, Kushki commits to adequately managing users and their access within Kushki Pagos' technological infrastructure, providing quality and scalability in its products and maintaining a focus on continuous improvement to meet this objective in the long term.
To this end, a series of processes and a set of rules for managing users and access within its infrastructure will be established. These processes and rules will be aligned with the ISO 27001 standard and compliance is mandatory to support the Information Security Management System (ISMS).
Kushki makes this commitment declaration, justified by the fact that security policies are essential for guiding the personal and professional behavior of employees, suppliers or third parties regarding information obtained, generated or processed by the company. These policies will also enable the company to follow best security practices and comply with applicable legal requirements.
Given the importance and sensitivity of information, the information security system is incorporated into the company's management system, enabling continuous improvement of the security system based on risk management and business continuity at Kushki.
These processes and rules will be aligned with the ISO 27001 standard and compliance is mandatory to support the Information Security Management System (ISMS).
Frequently asked questions
Security you can verify
Kushki holds various security certifications that validate it as a secure payment platform: Certifications 462/2022 and 463/2022 for adoption and implementation of crime prevention models, ISO 27001 certification for information processing, transmission and storage, PCI DSS certification (the highest in the payment ecosystem), PCI PIN certification (the highest standard for card PIN protection at POS), and anti‑fraud and tokenization tools.
We have anti‑fraud tools and strategies that we adapt depending on the industry and the merchant's needs.
Our specialized cybersecurity team performs security tests and monitors all our services and products 24/7.
When a merchant begins using our services, they will have a security team available to inform them of any risk situation before and throughout the entire time we work together.
