success case

PagueVeloz

Pague Veloz, a payment services company acquired by Serasa Experian, entered a new phase of expansion that demanded strict security standards due to the increase in transaction volume, the strengthening of its market presence, and the need to convey trust to customers, acquirers, and partners.

Within this context, PCI DSS certification became strategic to ensure security, compliance, and competitiveness.

Broad participation and multidisciplinary engagement

8

areas involved

10

interviews conducted

+450

controls audited

+460

pieces of evidence collected

Improved internal maturity — The process clarified PagueVeloz’s security and governance flows, strengthening internal practices and the ability to continuously meet PCI requirements.

PCI DSS Tier 1 certification successfully completed — Official delivery of RoC and AoC within the established deadline.

Process completed 35% faster than previous years — The global target was 30%; the result exceeded expectations.

The challenge

PagueVeloz’s compliance journey began in 2022, following a model proportional to the company’s size at the time. However, with the acquisition and continued growth, it became necessary to evolve to a more robust certification process — now at the highest level, PCI DSS Tier 1 – Service Provider, which applies to companies with greater relevance in the payments ecosystem.

The 3 major layers of complexity

Post-acquisition integration and cultural change
Transition to PCI DSS 4.0.1
Legacy remediation and strategic repositioning

We had to redesign the strategy. There were points left behind, and that could compromise the process. The challenge was to reorganize everything in a clear way.

Lincoln Mendo

The certification journey with Conviso

PagueVeloz chose Conviso to conduct the PCI DSS certification cycle as part of renewing the process after changing the audit provider.

The decision was driven by the quality of service, organization, trust in the team, and previous positive experiences with Conviso professionals.

The operation included:

Official PCI DSS audit
Validation of controls and scope
Organization and analysis of evidence
Issuance of official reports (RoC and AoC)
Structured interviews with internal teams

Differentials perceived by PagueVeloz

1

Speed far above historical standards

The certification was completed in record time, significantly shorter than the typical timeline for projects of this scale. Even in a scenario with internal changes throughout the cycle, the process maintained fluidity, predictability, and a steady pace through completion.

2

Perfect alignment in evidence organization

PagueVeloz already used a structured evidence repository, and Conviso’s working model — supported by the Conviso Platform — fit seamlessly into this structure.

Our organization model matched perfectly with Conviso’s. That reduced rework and accelerated everything.

Lincoln Mendo

3

Clear, technical, and respectful execution

Interviews were direct and technical, yet conducted in a light and respectful manner, aligned with internal policies and the client’s context.

The team handled everything professionally, smoothly, and within the established deadlines. With the teams, the conversations were technical and assertive, but by no means aggressive or imposing.

Lincoln Mendo

4

A method that prioritizes what really matters

Conviso structured evidence according to priority levels (high, medium, low), giving teams immediate clarity on what needed to be addressed first.

The methodology you created makes things much easier for the client, especially if the client is already well organized.

Lincoln Mendo

5

Conviso Platform as an organization and visibility hub

The Conviso Platform was highlighted as a key differentiator, helping structure the process, centralize QSA requests, group evidence by priority, and provide visibility into audit status.

It’s worth choosing you for the organization you have, for the platform you have — which also helps with organization —and for the professionals, who are agile and highly knowledgeable.

Lincoln Mendo

Maximum satisfaction with the consultancy

Lincoln highlighted Conviso as a recommended partner due to organization, methodology, and speed.

The experience was excellent — I’d give it an 11 out of 10.Service, organization, and flexibility made a huge difference.

Lincoln Mendo