As a regulated financial institution, Unzer combines modern technology with high standards in security, data protection, risk management, and compliance. Our payment infrastructure is PCI DSS 4.0.1 certified, and our information security management system is ISO/IEC 27001:2022 certified. We continuously invest in our systems and processes so you can rely on safe and reliable payment processing.

Our platform UnzerOne handles sensitive financial and personal data, which is why it was built from the ground up following the highest security and privacy standards. The payment infrastructure is certified at the highest level of the Payment Card Industry Data Security Standard (PCI DSS 4.0.1). On top of that, a security team monitors all activity on the platform around the clock.

PCI DSS 4.0.1 is a globally recognized security standard for companies that process, store, or transmit card data. It defines how sensitive payment information should be protected and how fraud risks should be reduced. Our payment services are independently audited and certified according to PCI DSS 4.0.1. So you can trust that card data is handled and protected according to high, industry-recognized security standards.

Yes. Since 2026, Unzer has been certified according to the international standard ISO/IEC 27001:2022 for an effective information security management system.

Cybersecurity is one of our top priorities. Our security team monitors the platform around the clock (24/7), we regularly perform stress tests on our systems, and we continuously train our employees on information security. Security and data protection requirements are also integrated from the very beginning into the development of new products. This way, we can identify risks early on.

Yes. Our security and compliance standards apply across all sales channels. The UnzerOne platform connects online, mobile, and in-store payments and was designed from the start to enable secure shopping experiences across all solutions, no matter where your customers pay.

Yes. Data protection is an integral part of our products and processes. Unzer respects the privacy of merchants, end customers, and business partners, and processes personal data strictly legally, transparently, and for clearly defined purposes. We don't collect unnecessary data, only keep it as long as needed for the specific purpose or if required by law, and protect it through appropriate technical and organizational measures.

Nein – nicht für eigene kommerzielle Zwecke. Die Daten deiner Kunden verarbeiten wir in erster Linie, um deine Zahlungen sicher abzuwickeln. Darüber hinaus verarbeiten wir bestimmte Daten nur, soweit dies zur Erfüllung unserer eigenen gesetzlichen Pflichten – etwa zur Betrugs- und Geldwäscheprävention sowie zum Risikomanagement – erforderlich ist. Die gesamte Kundenbeziehung bleibt bei dir: Wir nutzen die Daten deiner Kunden weder, um ihnen eigene Produkte zu verkaufen, noch für andere eigene Zwecke. Das stärkt das Vertrauen und die Bindung deiner Kunden an dich und dein Geschäft. 

We’ve set up a company-wide risk strategy and use modern risk management systems like Feedzai for transaction monitoring. Our credit and fraud checks at Unzer have long gone beyond the CCD2 standard. Specifically for fraud prevention, we also use our own AI-based models and scorecards – to provide the best possible protection for our merchants and their customers.

No. Security and risk management features are built right into our payment solutions – from transaction monitoring to AI-powered risk models to real-time checks for BNPL payment methods. You get professional protection without having to set up or run complex fraud detection systems yourself.

Yes. In addition to the standard checks, we use our own AI-based models and scorecards for fraud prevention. They help to spot unusual patterns more quickly and assess risks better, complementing our modern risk management systems and continuous transaction monitoring.

For payment methods like invoice and installment purchases, Unzer checks customers' identities in real time based on various parameters like date of birth and address. Our risk assessment software compares this data in fractions of a millisecond and detects fraudulent orders early on, helping us minimize fraud.

With invoice and installment purchases (Buy Now, Pay Later), Unzer relies on responsible risk decisions. Before approval, we check customers' identity and creditworthiness in real-time. You benefit twice from this: you get your money reliably, and your customers are protected from over-indebtedness.

We know our customers and support them not just during onboarding, but throughout the entire business relationship. In addition, we use transaction and sanctions monitoring and provide regular training for all employees to prevent financial crime. This way, we create a safe environment for you and all the other merchants on our platform.

Because careful checks protect everyone – including you. They help keep fraud and financial crime off the platform, and make sure you and your customers operate in a safe and trustworthy payment network. We publish our guidelines for selecting business partners transparently on our website.

We have a clear, transparent onboarding process. Our ethical guidelines, which we share publicly, define who we work with. We carefully review all business partners and only work with companies that meet our standards. This protects you and all the other merchants on our platform, too.

Yes. We know our customers and maintain the business relationship continuously throughout the collaboration. Ongoing support and review of our customer portfolio ensure a safe and trustworthy environment for everyone involved.

Unzer is a regulated financial institution and works closely and trustfully with all relevant supervisory authorities: in Germany, Denmark, and Luxembourg. Transparency and open communication with the regulators are a given for us.

Yes. Unzer is certified according to ISO 37301 for an effective compliance management system. The international standard confirms that compliance at our company is systematically anchored across the entire organization with clear processes, responsibilities, and controls.

Our Code of Conduct outlines Unzer's core values and the resulting principles for all business processes. It applies to management, all leaders, and employees, regardless of position or role.

We value trust and ethical standards in all our business relationships. For this, we have adopted an external code of conduct, which is published on our website. It includes, among other things, respecting human rights in accordance with the UN Guiding Principles on Business and Human Rights, maintaining a discrimination-free work environment, upholding ethical standards in the supply chain, and minimizing our environmental footprint.

Yes. Reports can be made by all Unzer employees as well as by external parties – so that includes you. There are several ways to do this: a 24/7 online tool, a phone reporting channel, or the option to contact the Group Compliance department in person or by email. Reports can be made anonymously or with your name, in German or English, and are transmitted securely.

Unzer places great importance on protecting whistleblowers and has put extensive measures in place for this. The goal is a safe and trustworthy environment for reporting concerns. The compliance department reviews incoming reports immediately and with the greatest possible independence – confidentiality is guaranteed.

We use AI in many areas: to support software development, in compliance and contract review, for internal knowledge searches, and in customer service. In fraud prevention, our self-developed AI-based models and scorecards help us detect fraud early. This way, we work faster and more efficiently, and you benefit from better products and shorter response times.

When using AI, we follow strict security measures and comply with the applicable legal requirements, especially the AI Act: Our internal AI applications run in a shielded, controlled environment, separate from live customer systems. Risk models integrated into payment processing are subject to strict access, governance, and control mechanisms. Each application operates on a need-to-know basis and only has access to the data required for its specific use case.

We are convinced that AI will play an even bigger role in the future, for example in risk management, fraud prevention, and the automation of payment processes. At the same time, security, authentication, and data protection are becoming increasingly important. That's why we continue to develop our AI solutions consistently according to high security and compliance standards – as a regulated financial institution, this goes without saying for us.