Who holds PCI DSS scope and scheme certifications on NORBr?
NORBr and its partners do. PCI DSS Level 1 scope, Visa and Mastercard scheme certifications, licensing and regulatory status, underwriting and risk sit on our side, together with ongoing audits and reporting. Your platform offers payments under its own brand without entering the regulatory perimeter, and your teams stay focused on your product.
In detail
NORBr and its partners do. PCI DSS Level 1 scope, Visa and Mastercard scheme certifications, licensing and regulatory status, underwriting and risk sit on the infrastructure side, together with the ongoing audits and reporting they require.
Your platform offers payments under its own brand without entering that regulatory perimeter. Card data is handled by the certified infrastructure, so your systems stay out of the most demanding part of PCI scope, and your teams do not run certification cycles themselves.
Evidence you can pass on
Your merchants, partners and auditors will still ask for proof. The Trust Center gives PayFacs, PSPs, ISOs and ISVs a single place to download NORBr's PCI DSS Attestation of Compliance, ASV scan reports and security documents, watermarked and kept current. NORBr B.V. is also listed on the Visa Global Registry of Service Providers, which anyone can check independently.
That evidence supports your own obligations. PCI DSS asks you to monitor your third-party service providers, and the documents in the Trust Center are what you hand over. Your security team receives them directly, and your own assessor can be given access, instead of collecting files through long email chains.