IBA Group’s tapXphone Obtains PCI MPoC Assessment Authority

November 24, 2025 

IBA Group’s tapXphone now holds a special permission, among the first worldwide for a SoftPOS, to assess PCI MPoC software integrations into other applications independently. The PCI-authorized laboratory SGS Brightsight BV granted this permission, which removes the requirement for testing at outside labs and shortens the PCI MPoC compliance process.

Created by the Payment Card Industry Security Standards Council, the PCI MPoC standard sets security rules for mobile payments on commercial devices. This authorization matters greatly for vendors who include tapXphone in their solutions. Before, these vendors needed extra certifications for products working with tapXphone. Now, businesses, developers, and integrators can bring their products to market more quickly and widen the availability of contactless payment acceptance worldwide. tapXphone offers a straightforward way to implement secure SoftPOS solutions that are practical, accessible, and designed to scale.

Simple Setup, Rapid Launch

Independent software vendors can integrate the isolated tapXphone SDK into their applications with little effort. However, each new application must satisfy a number of security requirements. Previously, verification of these requirements was possible only through an independent laboratory.

At present, there is an alternative. With the Vendor Verification Permitted status, the tapXphone team is authorized to conduct such assessments independently, without involving third-party laboratories. This reduces costs, shortens lead times, and makes the certification process more predictable.

Vadzim SmatrayeuVP Fintech Services at IBA Group

smotryaevWith tapXphone, you can launch payment solutions faster and with greater confidence. Our isolated SDK is already PCI MPoC compliant and now we are authorized to conduct assessments of new applications ourselves, without third-party laboratories. This means lower costs, less waiting, and greater focus on what really matters, namely your service and its value to the customer. The authorization opens a new chapter in the SoftPOS development.

Comprehensive PCI MPoC compliance

tapXphone was one of the first in the world to receive key PCI MPoC compliance certifications, including the following:

  •  MPoC Solution Requirements
  •  MPoC Certification for A&M Services
  •  MPoC Software Application
  •  MPoC Isolated SDK

This confirms the solution spans the entire process, from core tools to final product, with security built into every step.