Compliance
The set of legal, regulatory and scheme rules a payment process has to follow.
Compliance in payments is the set of legal, regulatory and scheme rules that apply to how a business takes, processes, refunds and reports payments. Travel-specific examples include PCI DSS for card data, PSD2 and SCA for strong customer authentication, ATOL and APC for trust and protection, AML and KYC requirements on certain flows, and consumer-protection rules around refunds and right of withdrawal. Compliance is continuous — what worked last year may not be enough this year.
What it means for travel businesses.
Travel finance teams sit at the intersection of payments compliance and travel-industry compliance: card-data security, money-protection regimes, escrow rules and consumer-rights laws all touch the same booking record. Evidence is the common currency of every compliance regime.
Compliance in travel is layered in a way most sectors do not match. The same booking can be in scope for PCI DSS, PSD2, ATOL Trust, ABTA, package travel regulations and the consumer-protection framework of the destination market. Each regime asks slightly different questions of the same evidence, and the cost of providing it scales with the gaps between systems.
The travel businesses that manage compliance well keep the evidence attached to the booking from the moment money first changes hands, so any regime can read what it needs without a custom export. The businesses that store evidence in silos pay for the gaps in audit, reporting and regulator interactions year after year.
How felloh handles it.
felloh keeps compliance evidence — authentication, settlement, protected funds, refund history — attached to the booking, so the trail is ready when a regulator, scheme, auditor or customer asks for it.
The dashboard’s Audit view records every operational action against the booking — refund approvals, beneficiary changes, settlement reconciliation — with the user, timestamp and reason captured. Risk Analysis pulls together the financial-protection picture so ATOL, ABTA and trustee questions get answered from the same source as the operations team uses day to day.
For travel businesses preparing for audit, regulator review or scheme reconciliation, the evidence is ready before the request lands. Compliance becomes a query, not a project, and the same record satisfies multiple regimes without rebuilding it for each.
Related terms.
PCI DSS compliance
A security standard for any organisation that stores, processes or transmits cardholder data.Read termGlossary termStrong Customer Authentication
A regulatory authentication requirement for many electronic payments under PSD2.Read termGlossary termPSD2 (Payment Services Directive 2)
EU regulation that introduced strong customer authentication and opened bank accounts to licensed third parties.Read termGlossary termKYC (Know Your Customer)
The process of verifying the identity of a customer to meet anti-money-laundering rules.Read termGlossary termTrust account
An account where customer funds are held in trust until the underlying service is delivered.Read termSee how this works around your bookings.
Bring one payment, reporting or cash-position problem. We will show how felloh connects the booking-level money trail behind it.
Book a walkthrough