Introduction

Apata is a cloud-native 3D Secure platform built for the specific demands of multi-issuer environments. Trusted by some of the world's largest fintechs and traditional banks, Apata handles the full complexity of modern 3DS authentication - from risk evaluation and cardholder challenge to scheme reporting and compliance.

By the Numbers

500M+

ACS transactions processed per year

200+

Issuers live on the platform globally

15 minutes

To onboard a new card issuer

EMV 2.3.1

Certified for EMVco 2.2 and 2.3.1

PCI DSS

Expires: 16 Apr 2026

PCI 3DS

Expires: 19 May 2026

ISO 27001

Expires: 30 Jan 2027

Scheme Certifications

Apata is certified globally by all major payment schemes, with regional scheme support available as required.

Visa

Visa Secure (formerly Verified by Visa)

Mastercard

Mastercard Identity Check (formerly Mastercard SecureCode)

Discover

ProtectBuy

American Express

SafeKey

Jaywan

Jaywan is the UAE’s domestic card scheme

Mada & Elo

Coming soon


The Platform

Apata is a multi-tenant platform with a dedicated workspace for each card issuer. Each Financial Institution operates independently with its own configuration, users, and analytics, while the Organisation layer provides full oversight and control across all tenants.

The platform is hosted on AWS Frankfurt, designed for the reliability and data residency requirements of financial services.

The Apata Portal

A single API integration gives access to everything. The Portal is where issuers configure, test, and manage their full 3DS setup without requiring engineering involvement for day-to-day changes.

Onboard Fast

Onboard a new card issuer in under 15 minutes. The platform provisions default resources automatically so issuers can start testing immediately.

Configure Everything

Set up challenge methods, interfaces, risk rules, and card programs through the Portal. No code changes required to adjust authentication behaviour.

Delegate Control

Manage each Financial Institution independently. Delegate access and permissions so each tenant has autonomy where it is safe, while the Organisation retains control where it matters.

Monitor and Analyse

Explore transaction data, track key metrics, and understand authentication outcomes across all issuers from a single view.

Platform Features

Experiment and Test

Validate new risk logic with Backtesting before it reaches production. Compare results against historical transaction data and ship what works with confidence.

Full Transaction Visibility

Total visibility across the full transaction lifecycle. Every evaluation, rule outcome, and challenge step is logged, giving teams clarity and faster answers.

Granular Permissions

Delegate permissions safely so each tenant has autonomy where it is appropriate. Organisation admins retain control over the configuration that matters most.

Real-time Reporting

Clear, real-time reporting with direct control over risk rules at every level. Adjust, test, and resolve issues fast without digging through data.

Getting Started

Apata follows a straightforward path from evaluation to go-live.

Step

Description

  1. Platform evaluation

Trial the platform and validate it meets your requirements.

  1. Commercial agreement

Align on commercial terms with the Apata team.

  1. Contract signed

Formal agreement in place.

  1. AV key exchange

Authentication value keys exchanged for your schemes.

  1. Onboarding and testing

Configure your environment and validate with the Merchant Simulator.

  1. Issuer onboarding

Onboard each issuer in under 15 minutes.

  1. Go live

Update your Directory Server ACS URL and start processing live traffic.


Get in Touch

Ready to get started or want to learn more about the platform? We'd love to hear from you.