Skip to content

Trust Center

Trust is built market by market

Explore Localpayment’s security practices, compliance program and applicable local entities as part of your vendor review.

Visit the Trust Center portalSee our licenses
  • PCI DSS v4.0.1
  • SOC 2 Type II report
  • ISO 27001
Validated for cardholder data
PCI DSS v4.0.1
Independent audit report on how our controls operate over time
SOC 2 Type II
Countries with a licensed, registered or supervised presence
18
Certified information security management system
ISO 27001

Explore

Everything your review needs, one click away

Start with the area your security, risk or procurement team asks about first.

Certifications and audit reports

Security assessed by independent auditors

Our information security program is built on recognized frameworks and checked by third parties, not just by us.

Licenses & regulation

Licensed, registered or supervised in 18 countries

Each row shows our exact status and the authority that oversees it. Product and payment-method availability varies by country.

  • ArgentinaLicensed

    PSP Aggregator — Central Bank of Argentina (BCRA) and Financial Investigation Unit (UIF).

    Authority: BCRA · UIF

  • BoliviaLicensed

    Financial Technology Company — Financial System Supervisory Authority (ASFI).

    Authority: ASFI

  • BrazilLicensed

    Payment Institution — Central Bank of Brazil (BCB).

    Authority: BCB

  • CanadaRegistered / supervised

    MSB Certificate — Financial Transactions and Reports Analysis Centre of Canada (FINTRAC).

    Authority: FINTRAC

  • ChileRegistered / supervised

    Obligated Entity — Financial Analysis Unit (UAF).

    Authority: UAF

  • ColombiaRegistered / supervised

    PSP — under the supervision of the Chamber of Commerce of Colombia.

    Authority: Chamber of Commerce

  • Costa RicaRegistered / supervised

    Supervised Legal Entity — General Superintendence of Financial Entities (SUGEF).

    Authority: SUGEF

  • Dominican RepublicRegistered / supervised

    PSP — Chamber of Commerce and Production of Santo Domingo.

    Authority: CCPSD

  • EcuadorLicensed

    Auxiliary Services Company for Public and Private Financial Sectors — Bank Superintendency.

    Authority: Superintendencia de Bancos

  • El SalvadorRegistered / supervised

    Obligated Entity — Financial Investigation Unit (UIF).

    Authority: UIF

  • GuatemalaRegistered / supervised

    Pay-in and Pay-out — Superintendency of Tax Administration (SAT).

    Authority: SAT

  • HondurasRegistered / supervised

    Pay-in and Pay-out — Chamber of Commerce and Industry of Tegucigalpa.

    Authority: CCIT

  • MexicoRegistered / supervised

    Money Transmitter — National Banking and Securities Commission (CNBV).

    Authority: CNBV

  • NicaraguaRegistered / supervised

    Payment Services — General Revenue Directorate (DGI).

    Authority: DGI

  • PanamaLicensed

    Payment Methods Issuer — Superintendency of Banks of Panama (SBP) and Financial Analysis Unit (UAF).

    Authority: SBP · UAF

  • ParaguayRegistered / supervised

    Obligated Entity — Secretariat for the Prevention of Money or Asset Laundering (SEPRELAD).

    Authority: SEPRELAD

  • PeruRegistered / supervised

    PSP — National Superintendency of Public Registries (SUNARP).

    Authority: SUNARP

  • UruguayLicensed

    PSP — Central Bank of Uruguay (BCU).

    Authority: BCU

How we protect your funds and data

Controls in every layer

From the first API call to the last payout, security is part of the flow — not an add-on.

  • TLS 1.2+

    Every connection to our API and Business Portal is encrypted in transit with TLS 1.2 or higher.

  • AES-256

    Data at rest is encrypted with AES-256, with keys managed and rotated in AWS KMS.

  • MFA

    Multi-factor authentication for Business Portal users, plus short-lived API tokens that expire after 5 minutes.

  • Role-based access

    Granular roles and permissions, so each user sees and does only what their job requires.

  • Penetration testing

    Periodic penetration tests by external specialists, alongside security monitoring and a web application firewall.

For security and procurement teams

Your vendor review, without the back-and-forth

Our Trust Center portal brings together the documentation security, risk and procurement teams usually ask for, so your review moves at the speed of your integration.

  • Request reports such as SOC 2 Type II and our PCI DSS attestation
  • Access our security and compliance policies
  • Find answers to common security questionnaire topics
Open the Trust Center

Onboarding

Compliance from the first conversation

Tailored AML programs by industry. FATF/GAFILAT-aligned controls.

  1. 01

    Commercial conversation

    We learn your business model, target markets, payment flows and expected volumes.

  2. 02

    Compliance review

    Due diligence or enhanced due diligence, including KYB of your company and its beneficial owners.

  3. 03

    Agreement and Stage

    After approval and signature, you get Stage (sandbox) credentials to build and test your integration.

  4. 04

    Security review and go-live

    Production credentials follow once Stage testing, the security review and business verification are complete.

Frequently asked questions

Is Localpayment licensed in all 18 countries?

We have a licensed, registered or supervised presence in 18 countries. The exact status differs by country: some require a license, others a registration or supervision as an obligated entity. The licenses page shows the status and regulator for each one.

How can I get your SOC 2 report and certification documents?

Request them through our Trust Center portal at trust.localpayment.com, or ask your account team.

How do I report a security vulnerability?

Email cybersecurity@localpayment.com. Our responsible disclosure policy explains the scope, the rules of engagement and what to include in your report.

Where can I check whether the platform is running normally?

Our public status page at status.localpayment.com shows live status for pay-in and payout APIs, authentication services and local rails, together with incident history.

How do I file a complaint?

Start with our 24/7 support team at support@localpayment.com. The complaints page explains how to escalate, how to reach our Brazil Ombudsman (Ouvidoria) and how to use our ethics channel.

Does this website use tracking cookies?

This site sets a strictly necessary security cookie from our web application firewall. Analytics and other non-essential cookies are only set with your consent.

Policies and legal documents

Preparing a security or compliance review?

Get the documentation you need from our Trust Center, or talk to our team about your specific requirements.

Contact salesVisit the Trust Center

How can we help?

Download your copy

Leave your details and get the full edition instantly.