PCI Pal
Procurement partnerAbout
PCI Pal is a cloud-native secure engagements platform that enables contact centers and business communications environments to take PCI DSS compliant payments while keeping sensitive data away from agents, recordings, and internal systems. The company provides secure payment capture, customer authentication, and fraud management capabilities that integrate with leading CCaaS, UCaaS, CPaaS, CRM, and payment service provider platforms. PCI Pal serves highly regulated industries including financial...
Details
VenSearch Intelligence
Ideal Customer
- PCI Pal's sweet spot is mid-market to large enterprise organizations with 50 or more contact center agents that handle high volumes of Cardholder Not Present (CNP) payments across voice and digital channels.
- Industries that get the most value include retail, financial services, utilities, government, healthcare, insurance, and BPOs — essentially any regulated sector where sensitive payment data must be kept out of agent environments and call recordings.
Key Differentiators
- PCI Pal positions itself as the 'global gold standard' for secure payment orchestration within the contact center, claiming to be the only cloud-native secure payments provider born out of a contact center business.
- Unlike legacy 'pause-and-resume' recording solutions, PCI Pal achieves 100% de-scoping of the customer environment through DTMF masking, speech recognition, and digital payment links — meaning sensitive card data never enters the agent's environment, recordings, or network.
Industries Served
- PCI Pal serves a broad range of industries including retail, financial services, utilities, leisure, logistics, government/public sector, healthcare, insurance, business process outsourcers (BPOs), and not-for-profit organizations.
- The company has particular strength in the retail, local government, and insurance markets, with the UK Department for Work and Pensions (DWP) among its largest direct public sector customers.
Service Coverage
- PCI Pal operates globally, with secure payment solutions deployed in over 50 countries and offices in London and Ipswich (UK), Charlotte NC (USA), Sydney (Australia), and Toronto (Canada).
- The platform is hosted across multiple AWS regions including the United States, Canada, United Kingdom, Mainland Europe, and Australia, enabling low-latency, data-residency-compliant service delivery worldwide.
Partnerships
- PCI Pal operates a partner-first go-to-market strategy, with 82% of new contracts and 68% of new ARR in FY25 sourced through its 50+ partner ecosystem.
- Named channel and technology partners include Genesys, NICE (designated as a Strategic DEVone Partner within the NICE CXexchange marketplace), RingCentral (embedded integration in RingEX and RingCX), Zoom, Talkdesk, Five9, 8x8, Amazon Connect, Verint, Presidio, and TTEC, along with 150+ payment gateway integrations.
Company Size & Ownership
- PCI Pal was founded in 1999 (originally as IPPlus plc, rebranded in October 2016) and currently has approximately 126 employees.
- For the fiscal year ended June 30, 2025, the company reported revenue of £22.48 million (~$29M USD), representing 25% year-over-year growth, with Annual Recurring Revenue (ARR) of £19.3 million also up 25%.
Compliance & Certifications
- PCI Pal holds a comprehensive set of compliance certifications, including PCI DSS Level 1 (the highest tier), SOC 2 Type II, HITRUST, ISO/IEC 27001, ISO 22301, ISO 9001:2015, ISO 14001:2015, GDPR, HIPAA/HITECH readiness, Cyber Essentials, and Cyber Essentials Plus.
- The platform is built on AWS, which itself supports additional standards such as FedRAMP, FIPS 140-2, and NIST 800-171.
Compiled from public sources by VenSearch · Last researched October 14, 2026
Offerings
7 offeringsClick to Pay
Click to Pay enables customers to pay by card, e-wallet, and bank transfer through digital payment links sent during a customer interaction. It supports omnichannel payment experiences and keeps sensitive data out of agent environments. The solution is part of PCI Pal's Secure and Capture product suite.
Customer Authentication
Customer Authentication verifies customer identity without relying on time-consuming question-and-answer processes. It is part of the Verify and Protect suite and is designed to confirm identity with reduced friction across the customer journey. The capability works across human agent, AI-powered, and hybrid interaction environments.
Fraud Management
Fraud Management detects high-risk interactions before sensitive steps such as payments or data capture begin. It is part of the Verify and Protect suite and is designed to proactively identify and mitigate fraud risk across contact center and AI-driven customer interactions. The solution integrates into existing contact center and communications platforms.
Key to Pay
Key to Pay allows customers to securely capture card details using keypad entry during contact center interactions. It keeps sensitive payment data away from agents, recordings, and internal systems while maintaining PCI DSS compliance. The solution works across human agent and AI-powered interactions.
Secure Engagements Platform
The Secure Engagements Platform is PCI Pal's unified cloud-native solution that combines secure payment capture, sensitive data handling, customer authentication, and fraud protection in a single platform. It integrates via a unified API architecture with CCaaS, UCaaS, CPaaS, CRM, AI, ERP, EHR, and more than 140 payment service providers. The platform delivers 99.999% uptime, global infrastructure, and supports human agent, conversational AI, and hybrid customer interaction models.
Services and Support
PCI Pal offers services and support described as seamless and reliable, covering every step of the customer journey from deployment through ongoing operation. This includes support for current customers via a technical support ticket system. The offering is designed to complement the cloud-based platform deployment.
Speak to Pay
Speak to Pay provides accessible payment capture using AI-powered speech recognition, allowing customers to verbally provide payment details during an interaction. It is designed to be inclusive and removes the need for keypad input. The solution keeps sensitive spoken data secure and away from agent recordings and systems.
Considering PCI Pal?
Our team will work with you to determine if PCI Pal is the right fit for your organization. From research and assessment through procurement negotiation and ongoing vendor management — we handle the entire process at no cost to you.