Compliance

Last updated: February 27, 2026

1. Regulatory Framework

GoodPay Gateways Private Limited operates in full compliance with all applicable Indian financial regulations. We are committed to maintaining the highest standards of regulatory compliance across all our services.

2. RBI Compliance

As a payment aggregator, GoodPay adheres to the Reserve Bank of India's guidelines including:

  • PA/PG Guidelines for payment aggregators and gateways
  • Data localization requirements — all payment data stored within India
  • KYC/AML norms for merchant onboarding
  • Tokenization guidelines for card-on-file transactions
  • Escrow account requirements for merchant settlements

3. PCI-DSS Level 1

GoodPay is PCI-DSS Level 1 certified, the highest level of security certification in the payment card industry. This ensures complete protection of cardholder data across all our systems.

4. SOC 2 Type II

Our infrastructure and processes are audited annually for SOC 2 Type II compliance, covering security, availability, processing integrity, confidentiality, and privacy.

5. Data Protection

We comply with applicable data protection frameworks including:

  • India's Digital Personal Data Protection Act (DPDP Act)
  • IT Act, 2000 and its amendments
  • GDPR (for international customers where applicable)

6. Tax & Payroll Compliance

Our payroll services ensure full compliance with:

  • Income Tax Act — TDS deductions and filings
  • GST regulations for service tax
  • Provident Fund (PF) and ESI contributions
  • Professional Tax regulations across states
  • Labour law compliance and statutory filings

7. Anti-Money Laundering (AML)

GoodPay implements robust AML policies including transaction monitoring, suspicious activity reporting, and enhanced due diligence for high-risk merchants, in accordance with PMLA (Prevention of Money Laundering Act).

8. Fraud Prevention

Our AI-powered fraud detection system monitors transactions in real-time for velocity checks, anomaly detection, and risk scoring to prevent fraudulent activities.

9. Contact

For compliance-related inquiries, contact us at contact@goodpay.website.