Virtual Card Maker runs on Zil Money’s payment infrastructure. Here is what that infrastructure is certified, audited, and aligned against, item by item, and what each one actually covers.
9 standards, held at the platform level.
Virtual Card Maker is a service of Zil Money. The standards here are maintained at the Zil Money platform level, the same infrastructure that issues, processes, and settles every card on Virtual Card Maker. Card issuance, processing, and settlement happen through Zil Money’s licensed banking partners.
Each item covers a different part of how the platform is built, run, and reviewed: some are third-party certifications, some are independent auditor attestations, some are framework alignments. Here is what each one actually means, in plain terms.
Standard alignmentCard processing aligns with the Payment Card Industry Data Security Standard, the baseline for any company that accepts, processes, stores, or transmits card data. That means strong access controls, secure networks, and encrypted transmission and storage of cardholder data.
Applies to: Card issuance and transaction processing on Virtual Card Maker.
CertificationZil Money’s quality management system is ISO 9001 certified, the international standard for consistent service delivery, documented processes, and continuous improvement.
Applies to: Zil Money’s products and services, including Virtual Card Maker.
CertificationZil Money’s IT service management is ISO 20000 certified, the international standard for reliable, well-managed delivery of IT services, including how incidents and changes are handled.
Applies to: The IT service management behind the platform.
CertificationZil Money’s information security management system is ISO 27001 certified, the international standard for identifying, managing, and reducing risk to sensitive information.
Applies to: Zil Money’s internal systems and customer-facing services.
Framework alignmentSecurity controls are aligned with NIST SP 800-53, the federal framework for protecting information systems. It is a control framework rather than a pass/fail certification, and is commonly required in government and enterprise vendor reviews.
Applies to: Government and enterprise vendor due diligence.
Independent auditAn independent auditor’s report on the controls behind financial transaction processing — the checks that confirm money moves the way it is supposed to and gets recorded correctly. The current report is a Type 1 engagement, a point-in-time assessment of control design.
Applies to: Financial transaction processing on the Zil Money platform.
Independent auditEvaluates controls against the AICPA Trust Services Criteria for security, availability, and confidentiality: how systems are protected from unauthorized access, kept running, and how sensitive data is restricted to authorized users. The current report is a Type 1 engagement, a point-in-time assessment of control design.
Applies to: The infrastructure Virtual Card Maker runs on.
Safeguard alignmentZil Money’s underlying platform infrastructure maintains safeguards aligned with HIPAA’s security requirements. Virtual card issuance itself does not involve processing protected health information; this reflects the security bar the infrastructure is held to, not a healthcare-specific service.
Applies to: Platform infrastructure alignment, inherited from Zil Money.
RegulationFollows California Consumer Privacy Act requirements, as amended by the CPRA, giving California residents the right to know what personal data is collected, request its deletion, opt out of its sale or sharing, and limit use of sensitive personal information.
Applies to: All Virtual Card Maker users who are California residents.
Virtual Card Maker is a service of Zil Money. These certifications and standards are maintained at the Zil Money platform level, the same infrastructure that issues, processes, and settles every Virtual Card Maker transaction.
SOC engagements and ISO certifications are each conducted by independent third-party auditors rather than self-assessed.
Running a vendor review? Tell us which documents your process needs and we will point you at what is available.
Talk to the teamVirtualCardMaker.com, powered by Zil Money, is a financial technology company, not a bank. Banking and money movement services are provided through partner financial institutions and licensed service providers. FDIC insurance coverage applies only to eligible deposit products and accounts, and is subject to applicable terms, conditions, limitations, and requirements. Additional information regarding partner institutions, products, and services is available in the applicable terms and agreements.
A Visa card per vendor, per hire, per trip, on a platform held to nine independent standards.
