PCI Compliance

Finix Case Study

How fast-growth payments processing company, Finix, achieved PCI DSS compliance in just four months.

Case Study1

“With RSI Security, we feel like a valued client, not just another name in a book of customers. And that means a lot, especially when working with a small, but growing, company like Finix.”

- Gurpal Singh, Head of Compliance at Finix


Financial technology (fintech) company, Finix, provides white-label payment infrastructure to payment facilitators, ISVs, and marketplaces, and therefore must be in compliance with PCI DSS regulations in order to protect sensitive cardholder data.

In 2017, as a growing company on-boarding more enterprise-tier clients, Finix needed a partner that would work with their existing Compliance and Security teams to streamline their PCI DSS efforts, as well as fill in any cybersecurity gaps that could be potentially exploited by hackers.

“Before we started working with RSI Security, PCI compliance was a difficult process for us,” recalls Gurpal Singh, Head of Compliance at Finix. “There were a lot of folks involved in our compliance efforts, but not everyone was aware of the depth and complexity of the regulations we were dealing with in terms of PCI DSS.”


Gather Information

The first steps that RSI Security and Finix took towards ensuring PCI DSS compliance were evidence gathering and documentation. The RSI Security team worked hand-in-hand with Finix’s Compliance team to organize and gather all of the necessary compliance-related documentation in a quick, painless fashion.

“We kicked off in late September, at which point RSI opened up the evidence portal for us to start uploading all of our documents and policy updates,” Singh recalls.

Onsite Assessment

“RSI Security then came on-site, and we were able to wrap up the documentation. We were just really happy to see that phase wrapped up so quickly.”

“That’s pretty impressive for a PCI audit,” observes Singh. “And we actually would have been done much faster, but wanted to conduct additional quality assurance testing before deploying the new environment to production.”


Compliance Assessment

The RSI Security team also conducted a full PCI DSS compliance assessment of Finix’s data, systems, and policies to identify any potential control gaps that needed to be filled in order to assure PCI DSS compliance.


Today, Finix can assure all of its clients that its white-label payments infrastructure is 100 percent compliant with PCI DSS v3.2.1. Additionally, the engagement with RSI Security helped Finix strengthen its overall approach to cybersecurity.

Screen Shot 2020-09-15 at 5.50.20 PM

“And what really meant a lot was that other assessors and auditors seemed very transactional in their approach, whereas with RSI Security there was an entire client-facing component that made us feel like a valued, long-term customer.”

- Gurpal Singh, Head of Compliance at Finix


Case Studies

Tilly’s Case Study

RSI Security

Power Digital Case Study

Meltmedia Case Study

WorkWave Case Study

Finix Case Study


Organizations that trust RSI Security

Screenshot 2023-10-13 142906