Compliance you can share with legal

• Data processing agreements available for gallery groups and enterprise partners.
• Role-based access with audit trails for sensitive data and collection-station access logs.
• Data minimization defaults with configurable retention windows.

• Card data handled exclusively by PCI-compliant payment processors.
• Tokenized transactions and vaulting; the platform never stores raw PAN data.
• Strong customer authentication supported for PSD2-aligned regions.

• WCAG 2.1 AA-informed collector flows with screen reader labels and audio prompts.
• Configurable font scaling and high-contrast themes for collector UI.
• Regular manual reviews of new components with assistive technology tests.

We provide signed artifacts to accelerate your security and legal review.