From license to first payment — no surprises
Central Bank of Azerbaijan licenses, PCI DSS compliance, e-commerce acquiring, Apple Pay and Google Pay. And if your system falls short, we fix it ourselves.
Launching a payment service? We'll tell you whether you need a license at all or can launch through a partner bank, and what PCI DSS requires — in what order.
Figure it out for free →Preparing a new product and want to know the requirements, risks and market landscape upfront.
Discuss a project →Entering the Azerbaijani market? We know the local requirements and how the regulator works in practice.
Discuss market entry →We handle preparation, documentation and communication with the regulator and the assessor. Your team focuses on the product.
So acquirers and card schemes onboard you without rejections.
We start by reducing the assessment scope, then run a gap analysis and prepare you for assessment — with a QSA or via SAQ, where your acquirer and the card schemes allow it for your level. We support the assessment through to the AOC and help you stay compliant afterwards. MPoC is for SoftPOS solution vendors; 3DS Core is for ACS and 3DS Server operators.
More about PCI DSS →Payment institution, electronic money institution, payment system operator: documentation, internal policies and dialogue with the regulator — from application to decision.
Your specialist or partner prepares the AML/CFT programme — we align it with the rest of the package.
Do you need a license? →So you can accept card payments on your website and in your app. Integration with e-commerce acquiring and EMV 3DS 2.x, Apple Pay and Google Pay via your acquirer or PSP: certificates, domain verification, testing.
Preparing for registration via a sponsor bank, compliance and monitoring program requirements, responses to card scheme inquiries.
Learn more →The regulatory landscape and payments market of Azerbaijan — before you invest in a launch.
A typical consultant leaves you a report full of findings. We close them ourselves — in code, infrastructure and integrations. We prepare and remediate; an independent assessor verifies — or you self-assess via SAQ, where your acquirer and the card schemes allow it.
More about developmentBuilding an AI product? See DNK Build ↗ — AI products, fixed scope.
Architecture, security and assessment readiness — before a QSA sees it.
Host-to-host and terminal integrations: field mapping, reversals and advices, MAC, testing against the acquirer host.
Connecting to the Central Bank's instant payment system over ISO 20022 and to the national QR standard.
Enhancements and new components designed for PCI DSS and Central Bank requirements from day one.
We fix the cost and timeline of our work after the gap analysis. Regulator and assessor timelines are planned separately.
A call and first consultation: we'll tell you what you need and in what order. We sign an NDA before you share any details.
Where you are now and what stands between you and the goal. Then a fixed price and timeline.
A plan with deadlines that accounts for controls needing to run for a while before assessment. You close findings yourself or hand them to us.
An AOC, a regulator's decision or your first live payment. Then ongoing compliance support, if you need it.
Every project runs under NDA. That's why there are no logos or case studies here — it isn't modesty, it's part of the service.
Our team comes from banking, payment processing, fintech and audit. We'll share more on a call.