YardPay Pro

Last updated: March 2026

Compliance & Security

Our commitment to regulatory compliance, security standards, and data protection.

At YardPay Pro, security and compliance are foundational to how we build and operate the YardPay Pro platform. We adhere to industry standards and regulatory requirements to ensure your data and your customers' data are protected at every level.

This page provides an overview of the compliance standards and security measures we maintain. For specific questions about our compliance programme, please contact our compliance team.

PCI DSS Compliance

Payment Card Industry Data Security Standard

  • We maintain PCI DSS compliance for the secure handling of cardholder data.
  • All payment card data is encrypted in transit and at rest using industry-standard encryption.
  • We undergo regular security assessments and vulnerability scans to maintain compliance.
  • Cardholder data is processed in a secure, isolated environment with strict access controls.

3D Secure Authentication

Enhanced transaction security

  • We support 3D Secure (3DS) authentication for Visa and Mastercard transactions.
  • 3DS adds an additional layer of verification, reducing fraud and chargebacks.
  • Our implementation supports both 3DS1 and 3DS2 protocols for broad compatibility.
  • Merchants benefit from liability shift on authenticated transactions.

Know Your Customer (KYC)

Identity verification and due diligence

  • We perform identity verification on all merchants and business accounts.
  • Multi-level onboarding with configurable verification requirements.
  • Document verification and identity checks in accordance with regulatory requirements.
  • Ongoing monitoring and periodic reviews of account activity.

Anti-Money Laundering (AML)

Transaction monitoring and reporting

  • Automated transaction monitoring systems to detect suspicious activity.
  • Compliance with applicable AML laws and regulations.
  • Suspicious Activity Reports (SARs) filed with relevant authorities as required.
  • Staff training on AML obligations and red flag indicators.

Central Bank Regulations

Compliance with Bank of Jamaica requirements

  • Operations conducted in accordance with Bank of Jamaica guidelines for payment service providers.
  • JAM-DEX (CBDC) transactions processed in compliance with Central Bank framework.
  • Regular reporting and disclosure as required by financial regulators.
  • Adherence to foreign exchange and cross-border payment regulations.

Data Protection

Privacy and data handling standards

  • Personal data processed in accordance with applicable data protection laws.
  • Data minimisation principles applied — we only collect what is necessary.
  • Data subject rights supported including access, correction, and deletion requests.
  • Cross-border data transfers protected with appropriate safeguards.

Security Measures

In addition to the compliance standards above, we implement the following security measures across the platform:

Encryption

TLS 1.2+ for data in transit; AES-256 encryption for data at rest.

Access Control

Role-based access control (RBAC) with principle of least privilege.

Multi-Factor Authentication

Two-factor authentication (2FA) supported for all user accounts.

Audit Logging

Comprehensive audit trails for all significant system actions.

Vulnerability Management

Regular security assessments, penetration testing, and patch management.

Incident Response

Documented incident response procedures with defined escalation paths.

Reporting a Security Concern

If you believe you have discovered a security vulnerability or have a compliance-related concern, please contact us immediately. We take all reports seriously and will investigate promptly.

YardPay Pro — Compliance Team

Email: compliance@yardpaypro.com

Security issues: security@yardpaypro.com