Rain Achieves PCI DSS Compliance, Reinforcing Commitment to Secure, Compliant Stablecoin Infrastructure

Rain, the global card issuing and payments platform powered by stablecoins, today announced that it has achieved compliance with the Payment Card Industry Data Security Standard (PCI DSS). This milestone reinforces Rain’s commitment to compliance and security, giving partners confidence that their card programs are built on infrastructure that meets the highest standards.

PCI DSS is a globally recognized standard that mandates rigorous security controls for organizations that handle payment card data. Rain’s compliance with this standard ensures that its infrastructure meets the highest levels of security, safeguarding sensitive payment information and reinforcing trust with partners and users alike.

“Achieving PCI DSS compliance is a testament to our dedication to building secure, compliant, and scalable payment solutions,” said Christopher Grieco, General Counsel & Chief Compliance Officer at Rain. “This accomplishment complements our SOC 2 certification and the ongoing audits of our smart contracts by Sherlock, highlighting our holistic approach to security and compliance.”

Rain is a full-stack, developer-friendly card issuance and payments platform. As a Visa Principal Member, Rain enables programs to launch in weeks—not months—without unnecessary middlemen or fragmented infrastructure. Enterprise institutions, fintechs, and crypto-native platforms rely on Rain’s speed, flexibility, and compliance-first approach to power millions of transactions in over 150 countries annually.

“Our enterprise clients demand the highest standards of security and compliance,” said Farooq Malik, CEO & Co-founder of Rain. “With PCI DSS compliance, we’re not just meeting those expectations, but exceeding them to ensure our partners can confidently scale their card programs globally.”