Yazara's Software Becomes First to Achieve PCI MPoC Isolated SDK Approval

Working in close partnership with Yazara, SGS performed a security evaluation for Yazara’s MPoC software implementation with one of the major components being the isolated SDK – the building block of payment apps. Work was undertaken at SGS Brightsight’s cybersecurity laboratory in the Netherlands, where meticulous testing was conducted against the PCI MPoC standard’s rigorous requirements.

Ahmet Öztürk, CTO at Yazara said: “We extend our gratitude to the SGS Brightsight team who supported and guided us throughout this process. SGS Brightsight has been a critical part of our certification journey with their superior technical knowledge, impeccable service quality, and dedicated efforts. Thanks to their expertise and collaboration, our product has been certified with a quality and reliability that surpasses industry standards.”

This achievement highlights SGS’s commitment to supporting customers in delivering secure payment acceptance solutions to global markets while accelerating deployment timelines.

Kiran Nair, Senior Security Evaluator at SGS said: “This is a significant milestone for SGS and demonstrates our dedication to leading innovation in the field of payment acceptance. Being the first to carry out an isolated SDK assessment highlights our commitment to remaining at the cutting edge for quality assurance and strengthens our reputation in the field of cybersecurity.”

Introduced in 2022 by PCI, MPoC addresses the increasing popularity of mobile payments and the need for secure acceptance of cardholder PINs or contactless payments on non-traditional payment terminals. It allows merchants to use consumer-grade devices, like smartphones and tablets, equipped with approved payment acceptance software to process payment transactions.