← Back

Compliance

How QuikyPay handles the boring-but-critical stuff that keeps money moving.

PCI DSS

We use Stripe (a PCI-DSS Level 1 provider) for card processing. Card data never touches our servers — tokens only. This minimizes our PCI scope to SAQ-A.

AML / KYC

Consumer wallets: MagnusID provides identity verification. Merchant accounts: Stripe Connect runs full KYC/KYB before payouts are enabled. High-risk categories (cannabis, adult) get extended review + reserve holds.

Sanctions + watchlists

Every account is screened at creation and periodically against OFAC SDN, EU consolidated, and HMT lists. Flags surface in the operator compliance queue for review.

Tax reporting

1099-K for US merchants crossing IRS thresholds. W-9 collection built into onboarding. Multi-state sales tax handling via the tax_collected ledger account type. MagnusBooks ingests directly for end-of-year filing.