Sample data — demo tenant NordicPay · Static demo (no backend)

PayEvidence

Continuous evidence for EU payment platforms
PCI DSS · DORA / ICT evidence · Estonia & Nordics beachhead

Stop rebuilding compliance proof in spreadsheets every audit cycle.

PayEvidence turns payment-stack signals into continuous, auditor-ready PCI DSS (and DORA-relevant ICT) evidence — so Compliance and CISO teams at PSPs and fintechs always know what still proves each control.

Try the NordicPay demo → Book a 10-minute demo
Not a QSA assessment No cardholder data (CHD) Synthetic / scrubbed signals only Evidence layer — not a bank or PSP

What it does

  1. Ingest payment-stack artifacts (API access logs, config snapshots, control-test results, change records).
  2. Map them to a curated PCI-first control catalogue (DORA ICT subset next).
  3. Score each control continuously as pass, gap, or stale.
  4. Export dated HTML + PDF evidence packs for auditors and audit folders.

Who it’s for

  • Buyer: Head of Compliance / PCI program owner; CISO co-buyer.
  • ICP: EU payment platforms, PSPs, and fintechs that run their own card or payment-API stack.
  • Beachhead: Estonia & Nordics → DE/NL.
  • Not for: merchants with no payment backend; generic all-of-GRC; CHD processing or PSP licensing.

Positioning (clear boundaries)

PayEvidence is an evidence layer. It shortens the gather loop QSAs still make you do by hand. It does not replace a QSA, does not claim a clean bill of health, and does not store or process cardholder data — only metadata, scrubbed logs, configs, and control tests.

MVP covers an evidence-heavy PCI subset (20 controls in the NordicPay sample), not every PCI DSS requirement.

NordicPay sample — what you’ll see in the demo

Default profile: 16 pass / 4 gap / 0 stale across 20 PCI-mapped controls. Four intentional gaps (change management + vulnerability). Generate dated HTML/PDF packs; switch to the change-record profile to clear change gaps (18/2) while vuln gaps remain.

Open dashboard Sample pack (HTML) Sample pack (PDF)

Founder

Haroon Ali Shah — 18+ years backend/platform, including Rakuten Payment Gateway (PCI DSS), mobile APIs, and membership platforms. Building PayEvidence for the Estonia Startup Expert Committee path and design-partner outreach to PSPs.

Contact: jharoonalishah@gmail.com

Static demo for committee and design-partner use. Sample tenant NordicPay uses synthetic evidence only. Scores and packs are frozen snapshots from the PayEvidence app — not a live assessment.