Technology
We did not build the payment core ourselves.
A payment company earns trust by choosing infrastructure that has already been audited by someone else. Zuripay licenses its payment orchestration platform from Akurateco B.V.
Akurateco B.V.
Akurateco is a white-label payment orchestration provider. Its platform is PCI DSS Level 1 certified — the highest tier of the standard, and one that is independently audited by a Qualified Security Assessor rather than self-declared.
We contract with Akurateco under a formal licence. That gives Zuripay a payment core that has been assessed by specialists, and lets us put our own effort into the things that are specific to Zambia: the rails, the merchants, and the regulation.
Card data is tokenised. Zuripay does not store raw card numbers.
Why this matters to a bank
- The payment core is certified to the highest PCI DSS tier.
- Certification is independently audited, not self-attested.
- Cardholder data is tokenised and does not rest on Zuripay systems.
- Zuripay operates in a reduced PCI scope as a result.
- The platform is proven in other markets before ours.
Built and tested. Waiting on one thing.
The platform is integrated and the company is established. What stands between Zuripay and its first merchant is the Bank of Zambia’s decision — and we would rather wait for it than work around it.