Trust & compliance

Certifications

Cake's 3-D Secure, authentication and biometric technology is independently tested and certified. Technology certificates are issued to BeFinancial LTD.

EMV® 3-D Secure

EMVCo-approved 3-D Secure components, supporting EMV 3DS protocol versions 2.2.0 and 2.3.1.

EMVCo

Access Control Server (ACS)

Product: TCAS 2.3.1
Protocol versions: 2.2.0 · 2.3.1
Approval: 3DS_LOA_ACS_BELT_020301_01241
Valid to: 24 Apr 2028

Letter of approval EMVCo

3DS Server

Product: CAKE 3DS Server 2.3.1
Protocol versions: 2.2.0 · 2.3.1
Approval: 3DS_LOA_SER_BELT_020301_01213
Valid to: 9 Mar 2028

Letter of approval EMVCo

3DS SDK (iOS)

Product: CAKE 3DS SDK iOS 1.0.0
Protocol versions: 2.2.0 · 2.3.1
Approval: 3DS_LOA_SDK_BELT_020301_01298
Valid to: 8 Sep 2028

Letter of approval

Card schemes

Approved or registered with Visa and Mastercard.

Visa

Visa Secure — approved 3DS Server

Product: CAKE 3DS Server 1.0.0
Protocol versions: 2.2.0
Approval ID: 3DS2.2.0BeF23163DSS
Valid to: 10 Apr 2028; Supports SCA and BME

Visa approved solutions Visa

Visa Global Registry of Service Providers

Type: 3DS Service Provider (ACS) · Third Party Servicer (PCI DSS)
Valid through: 30 Apr 2027
Assessor: CyberCube Services Pvt. Ltd.; Search the registry for “BeFinancial”

Visa Global Registry Mastercard

Mastercard Identity Check — approved 3DS Server

Component: 3DS Server
Protocol versions: 2.3.1; Listed on Mastercard's Identity Check vendor list

Vendor list

Authentication & biometrics

Passwordless sign-in and face liveness, certified against international standards.

FIDO Alliance

FIDO2® Server Certified

Product: CAKE FIDO2® Server
Specification: FIDO2 2.1
Certificate: FIDO20020250630001
Issued: 30 Jun 2025

View certificate iBeta

ISO/IEC 30107-3 PAD Level 2

Product: Face liveness — FaceAuthen (Cake by VPBank Face Authen 1.0.8)
Level: Level 2 · 0% APCER across 750 presentation attacks
Tested: 25 Apr 2025

Confirmation letters

Security & compliance

Organisation-level certifications held by Cake by VPBank.

PCI SSC

PCI DSS 4.0.1 Level 1 & PCI 3DS

Payment card data security and 3-D Secure environment

Announcement TÜV NORD

ISO/IEC 27001:2022

Information security management system

Announcement

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC. FIDO2® is a trademark of the FIDO Alliance.