Tokenization vs Encryption for Card Data
Every few months a product manager or a board member asks me some version of the same question: "We encrypt the card numbers, so we are PCI compliant and safe,...
11 min441Read →
Tagged #compliance
4 articles tagged #compliance.
Designing for Audit Trails from Day One
Every fintech founder I have worked with eventually has the same uncomfortable conversation with an auditor, a regulator, or a partner bank's risk team. The...
11 min975Read →
An Engineer's Introduction to PCI DSS
Every engineer who touches a payments system eventually runs into PCI DSS, usually at the worst possible moment: a few weeks before a deadline, when someone in...
11 min368Read →
Designing a Compliance-First Data Model for African Fintech
In most software, the data model exists to serve the features. In regulated fintech, the data model also has to serve the auditor, the regulator, and a future...
4 min455Read →