Webinar: Card acceptance and PCI compliance: flexibility, control, and data ownership by The Paypers

Card acceptance and PCI compliance: flexibility, control, and data ownership

About

Most teams approach card acceptance solely through the lens of compliance.

What they often don't realize is that these architectural decisions have consequences far beyond compliance: PSP lock-in, orchestration limitations, and no ownership of card data.

Whether you're a merchant accepting payments directly or a service provider supporting card flows for others, the same six architectures are on the table. However, they each offer varying levels of flexibility, control, and data ownership.

Join Shane Curran (Evervault CEO), Shane Peden (Aprio Partner, Risk Advisory and Assurance Services), and Masha Cilliers (Payment Industry Expert, iNED, Board Advisor), for a review of each architecture, the trade-offs that come with them, and how the picture shifts depending on whether you're attesting as a merchant or a service provider.

This session is designed for leadership, product, and engineering teams who are building or modernizing card acceptance.

Watch now for a clear framework to choose the architecture that fits your business, not just your compliance team.

Agenda

How architectural decisions shape PCI scope, vendor lock-in, and ownership of card data
A framework for evaluating card collection methods by scope, control, flexibility, and data ownership
Why multi-PSP routing depends on getting your architecture right from day one
What changes when you're attesting as a merchant or a service provider

Presenters

Masha Cilliers

Payment Industry Expert, iNED, Board Advisor [Moderator]

Masha Cilliers has been advising merchants and payment companies on ‘all things payments’ for many years. Masha previously held senior positions at Visa, Microsoft, Mastercard, CyberSource, and Worldline, and then became a consultant with Payment Options, as well as a Specialist Partner at Be Shaping the Future Consulting and Board Advisor to Limonetik (later Thunes). Currently, she acts as an Independent Executive Expert and holds positions of Non-Executive Director at Trust Payments and TrustUK Payments and Board Advisor at XanderPay.

Shane Curran

Founder & CEO / Evervault

Shane is the founder and CEO of Evervault, a Series B company building developer infrastructure to collect, process, share, and enrich sensitive data like credit cards, wallets, and PII.

Shane Peden

Partner, Risk Advisory and Assurance Services / Aprio

Shane Peden is a Partner at Aprio and leads the firm’s PCI DSS Certification and Managed Security Compliance services practices. He specializes in information security, compliance, and assurance services, helping high-growth technology companies and startups scope, plan, and implement cybersecurity programs to achieve certifications such as PCI DSS, ISO 27001, SOC 2, and HITRUST. Shane is a CISSP, CISA, and PCI QSA with more than a decade of experience helping organizations demonstrate security maturity to customers, executives, and stakeholders.

First Name*

Last Name*

Email Address*

Job Title*

Company*

Country*

Phone Number