Dojo
UK card payments provider offering card machines, online payments and acquiring to small and medium businesses; trades as Dojo.
Certifications & Accreditations
| Certification | Certifying Body | Scope | Achieved | Expiry | Status |
|---|---|---|---|---|---|
| PCI DSS Level 1 (service provider) | No QSA named | Vendor wording: environments used in the transmission of payment transactions are "hosted in an environment that has passed PCI DSS Level 1 service provider accreditation" — this attests to the hosting environment, not unambiguously to Paymentsense/Dojo itself. No version, AoC or dates. | — | — | Current |
Compliance Frameworks
PCI DSS v4.0
Partial
Wording attests to the hosting environment rather than clearly to Dojo’s own AoC; version, QSA and dates not published.
GDPR 2016/679
Full
DPO appointed and reachable via the privacy inbox; ICO registration Z1683152 (Paymentsense Limited). No standalone DPA template published.
Legal & Privacy
- Privacy Policy View ↗
Contact & Responsible Disclosure
- Responsible Disclosure View policy ↗
- Bug Bounty Platform None — email-based VDP, no third-party platform
Regulatory status
Legal entity **Paymentsense Limited**, company 06730690, London W2 1DG. Vendor-stated FCA authorisations: **FRN 738728** (authorised and regulated by the FCA) and **FRN 900925** under the Electronic Money Regulations. Verify both on the FCA Register.
**No ISO 27001 evidence found.**
⚠️ Dojo’s customer-facing PCI pages on support.dojo.tech explain **merchant** PCI obligations — they are not statements of Dojo’s own certification.
The VDP commits to a two-working-day response and offers public credit. Scope: dojo.tech, the mobile apps, and Dojo-owned APIs and gateways; third-party SaaS excluded.
Copyright © 2026 SnapGRC