Feature

PCI DSS

Cardholder-data handling certified to PCI DSS.

10 providers 74 APIs 10 declared variants

The provider is assessed against PCI DSS for handling cardholder data, often reducing the integrator’s own scope through hosted fields or tokenization.

10 API providers on the APIs.io network offer pci dss. The highest-rated are Raygun, Paymob, Interswitch, Kushki, Zluri.

Providers

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Strong 3 Solid coverage with minor gaps
Raygun Raygun is an application monitoring platform that combines Crash Reporting, Real User Monitoring (RUM), and... 15 APIs 68.9 Paymob Paymob is a Cairo-headquartered, licensed payment infrastructure provider for the MENAP region. Serving rou... 5 APIs 61.8 Interswitch Interswitch is Nigeria's foundational digital payments and transaction-switching company, founded in 2002 a... 12 APIs 60.4
Developing 3 Usable, with meaningful gaps to close
Kushki Kushki is an Ecuador-headquartered LatAm fintech operating as a regional non-banking acquirer for the Andea... 8 APIs 58.6 Zluri Zluri is a SaaS management and operations platform that helps organizations discover, govern, and optimize ... 1 API 57.3 Phonely Phonely is an AI voice agent platform that answers business phone calls in real time with large-language-mo... 2 APIs 55.0
Thin 3 Limited public surface area
Healthie Healthie is a cloud, API-first EHR and practice management platform purpose-built for digital health startu... 1 API 38.7 Amazon Audit Manager AWS Audit Manager helps you continuously audit your AWS usage to simplify how you assess risk and complianc... 1 API 35.7 American Express American Express is a financial services company that offers a wide range of products and services, includi... 12 APIs 31.4
Emerging 1 Early or largely undocumented
Pagar.me Pagar.me is the API-first online payments platform from Stone Co., one of Brazil's largest financial techno... 17 APIs 27.6

What Providers Actually Declared

This feature is a canonical term. These are the free-text strings providers wrote in their own apis.yml that map onto it.

Card TokenizationCard tokenization via Kushki.js Hosted Fields, iOS SDK, and Android SDK (PAN never touches the merchant server)HIPAA and PCI compliant infrastructure operating ~2.5B API calls/month at 99.99% uptimeHIPAA, GDPR, CCPA, and PCI compliantHIPAA, SOC 2, GDPR, CCPA, and PCI compliancePCI DSSPCI DSS Level 1PCI-DSS certified infrastructurePre-built frameworks for SOC 2, PCI DSS, HIPAA, GDPR, and moreRecurring Payments — Verve / Visa / Mastercard tokenization plus scheduled charges for subscriptions

Scroll for all 10