Compliance in payments is the set of legal, regulatory and scheme rules that apply to how a business takes, processes, refunds and reports payments. Travel-specific examples include PCI DSS for card data, PSD2 and SCA for strong customer authentication, ATOL and APC for trust and protection, AML and KYC requirements on certain flows, and consumer-protection rules around refunds and right of withdrawal. Compliance is continuous — what worked last year may not be enough this year.
Travel payments glossary
Compliance
The set of legal, regulatory and scheme rules a payment process has to follow.
Why it matters in travel
Travel finance teams sit at the intersection of payments compliance and travel-industry compliance: card-data security, money-protection regimes, escrow rules and consumer-rights laws all touch the same booking record. Evidence is the common currency of every compliance regime.
Compliance in travel is layered in a way most sectors do not match. The same booking can be in scope for PCI DSS, PSD2, ATOL Trust, ABTA, package travel regulations and the consumer-protection framework of the destination market. Each regime asks slightly different questions of the same evidence, and the cost of providing it scales with the gaps between systems.
The travel businesses that manage compliance well keep the evidence attached to the booking from the moment money first changes hands, so any regime can read what it needs without a custom export. The businesses that store evidence in silos pay for the gaps in audit, reporting and regulator interactions year after year.
How felloh helps
felloh keeps compliance evidence — authentication, settlement, protected funds, refund history — attached to the booking, so the trail is ready when a regulator, scheme, auditor or customer asks for it.
The dashboard’s Audit view records every operational action against the booking — refund approvals, beneficiary changes, settlement reconciliation — with the user, timestamp and reason captured. Risk Analysis pulls together the financial-protection picture so ATOL, ABTA and trustee questions get answered from the same source as the operations team uses day to day.
For travel businesses preparing for audit, regulator review or scheme reconciliation, the evidence is ready before the request lands. Compliance becomes a query, not a project, and the same record satisfies multiple regimes without rebuilding it for each.
Where this shows up in compliance and protection.
Compliance touches more than one workflow at felloh. Start with the pages most travel teams reach for next.
- Compliance & Reporting
Prepare ATOL, APC, trust and audit evidence from live booking data — without a separate reporting layer.
Explore - Simplify ATOL & Trustee Reporting
Trust, escrow and protected-funds evidence drawn from the same record as the underlying payment.
Explore - Financial Protection Data
Authentication, settlement and protection evidence held against the booking for audit and regulator queries.
Explore
More on compliance and protection.
Real-world context from the felloh team and customers, written for travel finance and operations.
InsightsChanges to ATOL’s APC: what could it mean to your travel business
ABTA's latest update on ATOL reform — where the direction of travel is heading, and what APC Levy changes could mean for travel businesses.
Read article
InsightsMaking ATOL renewals less painful: practical insights from TTC and felloh
Why ATOL renewals are getting harder — and how better payment visibility and connected data help travel businesses prepare with confidence.
Read article
Connect the dots.
See how payments, settlement, refunds and reporting evidence connect around every booking.