UbiRider, a developer of integrated transportation management solutions, has secured Payment Card Industry Data Security Standard (PCI DSS) certification for its UbiRider Platform, which combines transportation management, fare collection, open payments, passenger information, and data analytics into a single digital system.
This certification validates UbiRider’s approach to securing open-loop payments, which include bank cards and mobile wallets. The achievement is expected to enable the company to implement enhanced fare collection features, facilitate deeper customer insights, support more personalized services, and drive AI-driven efficiencies within transit payment processes. PCI DSS is a set of security standards established by major payment card brands such as Mastercard, American Express, Discover, JCB, and Visa, designed to protect card information from theft and prevent payment transaction fraud. Compliance is mandatory for any entity that stores, processes, or transmits sensitive payment card data.
Transit operators and passengers are increasingly seeking ticketing systems that accept direct payments via contactless bank cards or mobile wallets, which necessitates PCI compliance. UbiRider’s certification ensures that all transactions on its platform adhere to these security standards. Furthermore, PCI DSS enables UbiRider to innovate with new features and leverage payment data, helping transit operators reduce fare collection costs, simplify payment control and reconciliation, and gain deeper ridership insights. Riders benefit from faster, more convenient, and seamless payment experiences using their existing bank cards or mobile phones.
Paulo Ferreira dos Santos, CEO of UbiRider, stated, “Fare collection is central to public transport, but systems have traditionally focused only on processing and protecting transactions, often creating friction for riders. At UbiRider, we aim to deliver value for both operators and riders. With PCI certification, we will be able to implement more powerful features that both secure transactions and deliver trusted, seamless digital experiences to passengers.”
Traditional open-loop payment systems for transit often rely on multiple specialized providers for services such as payment gateways, acquiring, fare engines, and account-based ticketing, frequently operating partially offline and requiring complex hardware. UbiRider leverages its PCI certification to integrate most of these services into a single platform, aiming for a streamlined payment process. The UbiRider Platform, combined with Tap-on-Phone technology for real-time payments, offers a cloud-based solution for open-loop payments, operable on off-the-shelf Android devices. Beyond fare collection and ticketing, the platform also provides real-time operational management, financial control, and rider engagement.
Offered as software-as-a-service, the UbiRider Platform is designed to be accessible to operators of any size, from single-bus operations to large fleets. This approach aims to provide small and mid-sized operators with modern technology that has historically been available only through expensive enterprise solutions. UbiRider states it provides advanced technology comparable to larger systems at a reduced cost.
PCI certification is also a foundational step in UbiRider’s development of agentic AI, which involves intelligent software agents intended to optimize rider experiences and operator workflows. By restructuring its cloud architecture and data systems to meet PCI standards, UbiRider has established the basis for AI models that can automate payment and fee reconciliation, predict and resolve operational issues in real time, deliver personalized rider dashboards, and enable unified mobility accounts across different cities and transport modes.
Ferreira dos Santos added, “Artificial intelligence can only deliver value if it’s fueled by clean, reliable data. PCI certification ensures that our platform not only protects data but also organizes it in a way that unlocks powerful AI applications. It’s a strategic step toward smarter, more efficient, and more human transit systems.”
UbiRider, based in Porto, Portugal, aims to make modern mobility solutions accessible to all operators. The UbiRider Platform is a modular Mobility-as-a-Service solution that supports account-based ticketing and tap-and-go payments. The platform is currently deployed in various cities and regions. UbiRider is backed by 1520 Innovation Fund (an investment vehicle from CTT and managed by Iberis Capital), Cedrus R&D III (managed by Cedrus Capital), Grupo Barraqueiro, and angel investors. Strategic partners include Mastercard, Deloitte, PayShop, and Viva.com.
