ZenoXCare — marketing
Loading certification details…
Payments certification·Self-assessed; QSA validation when card data scope expands
PCI DSS v4.0 Self-Assessment (SAQ A-EP)
Card payment integration scope: tokenization via gateway, no PAN storage, partner-mediated card-on-file. Mobile money rails (MTN MoMo) are out of PCI scope.
PlannedRenewal: annualOwner: ciso
Status & key dates
- Status
- Planned
- Issued on
- Not yet issued
- Expires on
- —
- Renewal cadence
- annual
No issued attestation yet. ZenoXCare only marks this status as Active once a third-party auditor has signed and dated the report — never before.
Scope & framework coverage
Card payment integration scope: tokenization via gateway, no PAN storage, partner-mediated card-on-file. Mobile money rails (MTN MoMo) are out of PCI scope.
Satisfies coverage for these regulatory frameworks
- PCI DSS V4
Frequently asked
- What is PCI DSS v4.0 Self-Assessment (SAQ A-EP)?
- PCI DSS v4.0 Self-Assessment (SAQ A-EP) is issued by Self-assessed; QSA validation when card data scope expands. ZenoXCare scope: Card payment integration scope: tokenization via gateway, no PAN storage, partner-mediated card-on-file. Mobile money rails (MTN MoMo) are out of PCI scope.
- Is ZenoXCare PCI DSS v4.0 Self-Assessment (SAQ A-EP)-certified?
- PCI DSS v4.0 Self-Assessment (SAQ A-EP) is on the public roadmap; no auditor engagement signed yet (we will not claim ACTIVE without an issued report). ZenoXCare's truth-in-marketing rule: a certification is never represented as Active without a signed report on file (build-time guard verify:certifications-registry blocks this).
- What is the renewal cadence for PCI DSS v4.0 Self-Assessment (SAQ A-EP)?
- PCI DSS v4.0 Self-Assessment (SAQ A-EP) is renewed on a annual cadence. The accountable owner role is ciso. Upcoming-renewal alerts trigger automatically via the compliance-expiry-sweep cron when the issued date is on file.
- What regulatory frameworks does PCI DSS v4.0 Self-Assessment (SAQ A-EP) satisfy coverage for at ZenoXCare?
- PCI DSS v4.0 Self-Assessment (SAQ A-EP) contributes coverage for the following regulatory framework ids: PCI_DSS_V4. The framework allowlist is locked in lib/regulatory/framework-ids.ts.
Every detail on this page comes from a single authoritative record kept by the ZenoXCare compliance team — the same record auditors review. A status only becomes Active once a third-party auditor has signed the report. See the full standards & compliance overview for posture across every framework, or request the audit pack for evidence under NDA.