Compliance and Certifications

VERITRAN is a company dedicated to providing digital solutions as part of a portfolio of business services aligned with a market that is diverse and demanding in terms of guidelines and quality aspects. In the context of the protection granted to such business solutions, Veritran executives understand that the adoption and implementation of international models and standards greatly contribute to the continuous improvement of the services offered for the total satisfaction of all stakeholders. By virtue of the above, Veritran is certified under the international standards ISO 9001:2015 and ISO 27001:2013. These good practice guidelines establish the responsibility of implementing and maintaining a Management System that complies with the principles of Service Quality and Information Security. These principles are complied with by Veritran under the following business policies:

Quality Policy

At Veritran we believe that simplifying people's lives boosts our clients' business.

Through our Enterprise Low-Code Platform, we accelerate and facilitate the development of immersive digital channels that create first-class user experiences and are prepared for the challenges of the future. We drive innovation in companies around the world, reaching millions of users who carry out billions of secure transactions a year. We ensure that our services meet the requirements expected by our clients, in each country in which we have operations, suppliers, partners and collaborators.

We are a company characterized by its great professionalism, considering it essential to understand quality as a fundamental tool to develop its activity. We will achieve the best results for our clients, society and all the people who are part of Veritran, through our Quality Management System based on the following purposes:

Continuous innovation

We foster an environment where innovative ideas are proposed in all areas of the company, where existing practices can be challenged, encouraging the co-creation of work, the contribution of value and disruptive innovation.

Service orientation

We focus on meeting the needs of our clients, ensuring compliance with legal, regulatory and internal Management System requirements. We make Quality a basic element of the Company's Culture, oriented towards the client, developing participative and collaborative management.

Transparency and communication

We comply with the processes, providing access to information while maintaining open communication with all our stakeholders.

Process definition

We manage the Business through a process-based Management System, adopting the best practices to comply with international standards. We benefit from expert and shared knowledge, fluid communication and constant training.

Work environment

We promote a work environment in which our employees generate initiatives for improvement and active innovation; they work in a conscious, responsible, collaborative and empathetic manner.

We are committed to making available the resources to disseminate and implement this policy at all levels of the organization, extending its reach to our employees, suppliers, partners, shareholders and customers.

Cyber Resilience Policy

Veritran has defined the following general policy that represents a statement of its commitment to ensure and maintain its mission objective by managing the risks associated with information security, technology and business continuity:

Veritran has adopted and implemented recognized standards aligned with international regulations governing good practices to ensure, protect, preserve and manage the confidentiality, integrity and availability of information with the help of timely management of its risks, taking into account the identification and implementation of controls to minimize the probability of occurrence and the level of impact associated with security incidents.

SOC 2

SOC 2 is an auditing standard developed by the American Institute of Certified Public Accountants (AICPA) to assess the effectiveness of an organization’s controls over information security, availability, processing integrity, confidentiality, and privacy. SOC 2 Type 1 measures an organization’s systems and controls and assesses the design and implementation of these controls to ensure they are appropriately designed to meet relevant trust services criteria.

With SOC 2 compliance, Veritran is equipped to meet the specific needs of key industries and provide clients with confidence that their sensitive data is protected by a trusted partner. For this audit and certification process, Veritran engaged a third-party professional auditor, Schellman & Company, LLC, and has been confirmed to meet the American Institute of Certified Public Accountants (AICPA) Trust Services Criteria.

Veritran was verified through a comprehensive independent audit relevant to security set forth in TSP Section 100, Trust Services Criteria for Security. More than 120 requirements were met for Veritran to achieve this important milestone of obtaining SOC 2 certification. The process included an extensive examination of Veritran’s controls, practices, organizational charts and business processes, their effectiveness and value, and more.

PCI DSS

Veritran LLC (Veritran) is a Tier 1 Service Provider located in Buenos Aires, Argentina, operating as a tokenization service provider for cardholder transaction requests in the mobile wallet. Veritran is responsible for receiving and sharing token issuance requests from cardholders and authorizing these tokens with brands.

Explanation of Third Party Relationships: Amazon AWS (Cloud Computing Service Provider): Provides cloud computing services to Veritran (PaaS) such as virtual networks, load balancers, storage, and other security and monitoring tools. Amazon AWS is PCI DSS compliant and its AOC (DOC-71, 14 Dec 2021 #3.2.1) was assessed by the assessor to ensure all applicable requirements are met.

Token Issuance Process (TSP): In the issuance flow, the issuer wallet requests card tokenization. Sensitive card data is received where the token is generated. Since the cardholder is operating from an issuer wallet, no additional terms and conditions or authentication flows apply.

ISO 27001

At Veritran, we are proud to be ISO 27001 certified, and we want to share with you the reasons why this certification is essential for us. Firstly, ISO 27001 certification demonstrates our unwavering commitment to information security and the protection of our clients' sensitive data. With this certification, we guarantee that we have implemented a robust information security management system supported by recognized international standards.

Furthermore, ISO 27001 certification allows us to systematically assess and mitigate the risks associated with information security. Through a proactive approach, we identify potential vulnerabilities and take the necessary measures to protect our infrastructure and the data entrusted to us. This certification also gives us a competitive advantage by instilling trust in our clients and business partners, demonstrating our commitment and ability to safeguard the confidentiality, integrity and availability of information throughout our operations. In short, ISO 27001 certification reinforces our dedication to information security and positions us as a trusted partner in an increasingly complex and threatening digital environment.

ISO 9001

Scope: "Design, development and evolution of the low-code software platform “Veritran Low Code Platform”. Design, development, customization, implementation and support of Digital Solutions for banking and retail, based on Veritran Low Code Platform.”

Elevating Excellence: Key Benefits of ISO 9001 Certification at Veritran.
Our ISO 9001 certification is not just a badge of quality; it is a promise of continued excellence that has transformed our operations and relationships with customers. Here's how:

Optimized Operational Efficiency: Certification has allowed us to establish clear and efficient processes, reducing waste and improving productivity in all our areas.
Continuous Improvement Guaranteed: With a systematic focus on continuous improvement, we are always adapting and refining our services, keeping us at the forefront of the industry.
Strengthened Trust and Credibility: Our customers trust us to consistently deliver high-quality products and services, which strengthens our relationships and differentiates us from the competition.
Compliance and Regulations Simplified: ISO 9001 provides us with a solid framework to comply with global regulations and standards, minimizing risks and ensuring compliance.
Improved Customer Satisfaction: By focusing our processes on customer needs and expectations, we have improved customer satisfaction and loyalty, resulting in longer lasting and more beneficial business relationships.
Access to New Markets: Certification has opened doors to international markets, allowing us to expand our global presence and capture new business opportunities.

ISO 9001 certification is a cornerstone of our quality and continuous improvement strategy, ensuring that Veritran not only meets, but exceeds market expectations.