PCI DSS - Payment card industry Data Security Standard compliance refers to the technical and operational standards that businesses must follow to ensure that card data provided by cardholders is protected. PCI compliance is enforced by the PCI Security Standards Council (PCI SSC). It ensures that businesses storing, processing, or transmitting card data electronically do so securely to reduce the risk of sensitive cardholder data theft or misuse.

Zoho Payments is PCI DSS Level 1 compliant, assessed and certified by PCI Qualified Security Assessor. It is highest level of compliance under the PCI DSS levels. In line with Level 1 standards, Zoho Payments ensures that customers' data and transactions are protected end-to-end.

ISO/IEC 27001 is one of the most widely recognized international standards for Information Security Management System. It ensures that an organization follows stringent practices to protect data across all operations. Zoho Payments has achieved ISO/IEC 27001:2022 certification, demonstrating its compliance with global standards in safeguarding Applications, Systems, People, Technology, and Processes.