EMV Level 3 · Europe

EMV Level 3 Certification in Europe

We handle application development, testing, acquirer coordination and approval support, so one engineering team takes you from requirements toward certification with your European acquirer or processor. Choose a full build, or managed certification for an application you already have.

Example EMV transaction traceILLUSTRATIVE
> A0 00 00 00 03  SELECT
> GET PROCESSING OPTIONS
> A0 00 00 00 04  0x9000

> AAC · EMV L3
> 9F10  9F36  9F27  9F33  03 TVR
> GENERATE AC

✓ APPLICATION CRYPTOGRAM ACCEPTED
DEVICE  EXAMPLETEST DATA ONLY
133EMV L3 certifications completed across regions
UK and EUScoped market by market, by acquirer and scheme
4 stagesTesting through submission
In-houseOur own EMV test tools, so you do not buy or rent any
01 · Who this is for

Where European projects usually start.

European EMV Level 3 projects usually start in one of four places.

US and North American ISVs and terminal makers entering Europe

Your application is certified at home and now needs a European acquirer, local schemes and local requirements. We scope what can be reused and what has to be built or retested.

European ISVs and software vendors

You are building or replacing a payment application for European merchants and need it certified with the acquirers your customers use.

Terminal manufacturers and VARs

You ship hardware across several countries and need a payment application, or a certification for an existing one, on each acquirer you want to support.

Acquirers, gateways and payment facilitators

You need certification capacity, a white-label option, or an integration built and taken through approval.

02 · European acquirers and processors

Certification is specific to each processor.

Processors do not all use the same stages, terminology, approval paths or prerequisites, so a certification with one does not cover another.

Processor
What to know
Foundry adapter
Pan-European acquirers and processors
Often serve several countries from one platform. We confirm whether one certification covers more than one country, and what must be repeated per market.
Confirmed during scoping
Domestic acquirers
Operate in one country and may add local scheme and domestic debit requirements. Tell us the country and we scope it.
Built during scoping
Gateways and payment service providers
Offer terminal programs with their own integration and certification steps. The path depends on their program.
Confirmed during scoping
Your own acquirer relationship
If you already have an acquirer, tell us which one. We scope against its specifications, test plans and approval path.
Built during scoping
03 · What is different

What is different in Europe.

Many markets, not one

Certification is scoped by acquirer and country. A certification in one European market does not automatically carry over to another, though some work can be reused. The UK and EU markets are scoped separately.

Domestic schemes and debit

Alongside the international card brands, many countries have their own domestic payment systems and debit networks. Which apply depends on the country, your acquirer and the cards you accept, and we include them in scoping from the first conversation.

A shared framework for local requirements

EMVCo provides a Level 3 framework that lets domestic payment systems add their own test requirements to qualified test tools alongside the international schemes, to speed up terminal testing in local markets. Each payment system still defines its own plans and policies, and the international brands run their own programs, such as Mastercard's Terminal Integration Process (M-TIP), on top.

Terminal approvals sit beside Level 3

Terminals also need PCI PTS for PIN entry and EMVCo Level 1 and Level 2 approval, and acquirers can add their own requirements. New terminals may also have to meet CE marking and accessibility rules. We confirm which apply with your acquirer and hardware vendor.

The effort varies by market

In some markets, acquirers and their terminal suppliers already provide standard approved terminals, which reduces the work for merchants. For an ISV with its own application, the application itself still needs certification. We tell you honestly where this applies.

Language and currency

European deployments often need several languages on screens and receipts, and more than one currency. We confirm the requirement with your acquirer during scoping.

04 · Readiness checklist

What has to be in place, and who supplies it.

Most delays come from missing inputs, not missing code. Who supplies each item varies by project and is confirmed in the Statement of Work.

Item
What it means
Typically supplied by
Acquirer or processor and countries
The processor you will certify with and the specific platform or host.
You, with your processor
Processor specifications
Specifications, sandbox credentials and the processor's project setup.
Your processor
Terminals
The terminal models and hardware available for testing.
You or your hardware vendor
Kernel and firmware
Versions in use and any approval evidence that applies to them.
Hardware vendor
SDK and documentation
SDK access, interface documentation and integration permissions.
Hardware vendor and processor, requested by you
Application status
Whether the application exists, how ready it is and which flows it must support.
You, assessed with Paying.co
Schemes, debit networks and entry modes
The international brands, domestic schemes and contact or contactless modes in scope.
You, with your acquirer
Languages and currencies
Screens, receipts and currencies required per country.
You, with your acquirer
Test environment
The environment, test assets and evidence the process requires.
Shared between Paying.co, you and the processor
Owners
Who fixes application issues, makes submissions and handles retesting.
Agreed in the Statement of Work
05 · Choose your engagement

Full build, side by side, or certify what you already have.

The right engagement depends on whether the payment application already exists and how much of the work your team wants to keep.

Engagement
Best when
What Paying.co does
What stays with you
Full application development and certification
You need the payment application built and certified.
Application engineering and processor integration, testing and coordination, resolving findings, and support through approval. Approval dependencies outside our control stay outside our control.
Hardware, access and decisions listed in the Statement of Work.
Embedded, side by side
You have an engineering team and want specialists inside your own process and tools.
Our engineers work with your team and tools, engaged only where needed.
Ownership of the application and your delivery process.
Managed certification for an existing application
Your application exists and your team does the coding.
Application readiness review, test cases, processor communication, retesting after fixes.
Code fixes to your application, and scope boundaries agreed up front.

Foundry-supported delivery can apply to compatible engagements and is covered below. Compare the options in more depth on the EMV Level 3 hub page and in Managed EMV Certification vs. Full Payment Application Development.

Custom Development →  Managed Certification →
06 · The process

Test early. Find problems before submission.

The stages below are a typical example for a full build. Your European processor may name or order them differently, and some of the work belongs to others.

01
STAGE ONE

User Acceptance Testing

Validate transaction flows, error handling, receipts and processor-specific requirements.

02
STAGE TWO

Host Validation

Exercise terminal-to-host messaging, reversals, settlement, timeouts and production-realistic flows.

03
STAGE THREE

Pre-Certification

Run the scheme and domestic network test suites internally before submission.

04
STAGE FOUR

Card Brand Submission

Manage submission through findings and final approval.

What Paying.co does

  • Builds or readies the application
  • Runs testing and pre-certification
  • Coordinates with the processor
  • Prepares and supports submissions

What others do

  • The processor sets specifications and approves the certification
  • Test labs and card schemes run their own test and review activities, on their own schedules
  • Your team or hardware vendor supplies devices and access

Findings and retesting. Reviewers may report findings. Application fixes follow, then retesting. Who makes the fixes depends on the engagement: Paying.co in a full build, and your team in managed certification unless agreed otherwise. Read the full EMV Level 3 certification process guide.

07 · Timeline and pricing

What drives the schedule and the cost.

We do not publish a single timeline or price for Europe, because the factors below change both. After scoping, we quote against a defined scope. Understand the factors in the EMV certification cost and timeline guide, or get a self-serve estimate with Benchmark.

Timeline

  • An estimate covers our engineering and testing effort
  • External scheduling and review by the processor, labs and schemes is separate and can change the calendar
  • Waiting on hardware, credentials, specifications or processor project setup delays the start
  • Changes to terminals, kernels, firmware, processors or requirements can change scope or trigger retesting
  • A full build takes longer than certifying an existing application

Pricing

  • Work is quoted against a fixed-scope Statement of Work with milestone billing
  • Cost drivers are the number of acquirers, countries, terminals, schemes and entry modes, and the amount of retesting
  • Full build and managed certification are scoped and priced differently
  • Inclusions, exclusions and responsibilities are listed in the Statement of Work, including any third-party fees
08 · Foundry's role

Start further ahead, when it fits.

Foundry is our EMV Level 3 framework. The transaction lifecycle is built once, and processor-specific logic sits in thinner adapters. For compatible engagements it can reduce the development work, and recent engagements are showing time and cost savings of roughly 60 to 70%.

For a European acquirer, the adapter is built during scoping unless one already exists, and we confirm that in the first conversation. Whether Foundry applies, and what that means for your schedule or cost, depends on your processor, hardware and scope, and we confirm it during scoping.

Explore Foundry →
ONE CORE → MANY ADAPTERS
L3 CORE
lifecycle · TLV · crypto · transaction state
GP · UCP REST
TSYS · TransIT
NAB · Velocity
Elavon · EPG
Cybersource
Santander · MXN
Example processor adapters. Only authorize() crosses the processor boundary.
09 · FAQ

Questions we hear about Europe.

Is there one EMV Level 3 certification for all of Europe?add
No. Certification is set by each acquirer or processor and by the schemes involved, and that varies by country. Some work can be reused between markets, but each acquirer has its own specifications, test plans and approval path.
Do I need a separate certification if I am certified in the United States?add
Yes. EMV Level 3 certification is acquirer-specific, so a US certification does not cover a European acquirer. Work done for one can sometimes be reused for the next.
Which European acquirers and processors do you work with?add
We work with European acquirers and processors and scope them on request. Tell us your acquirer and the countries you deploy in, and we confirm the scope during scoping.
Do domestic schemes and debit networks apply to my project?add
If your terminals accept domestic cards, local scheme requirements are likely in scope. We confirm which apply with your acquirer during scoping.
Does a certified terminal mean my application is certified?add
No. Terminals need PCI PTS and EMVCo Level 1 and Level 2 approval, but the payment application that runs on them is certified separately at Level 3 with your acquirer.
Can you certify an application that already exists?add
Yes. Managed certification covers an existing application: readiness review, test cases, processor communication and retesting after fixes. Code fixes to your application stay with your team unless agreed otherwise.
Do I need to buy or rent EMV test tools?add
No. We own our EMV certification test tools and run them in our own lab, so there is no tool acquisition or ramp-up on your side.
How long does certification in Europe take?add
It depends on scope. Hardware availability, processor specifications, test credentials, project setup and the processor's own scheduling all affect it, as do any findings that need fixing and retesting. A full build takes longer than certifying an existing application.
What affects the cost?add
Scope drives cost: full build or existing application, the number of acquirers, countries, terminal models, schemes and entry modes, and how much retesting is needed. We quote against a defined scope after a scoping conversation, with a fixed-scope Statement of Work and milestone billing.
How do I get a quote?add
Start with a scoping conversation about your processor, terminal, region and requirements. After that we return a scoped proposal with milestones. Use the form below to begin.
10 · Related reading

More on EMV Level 3 certification.

Self-serve option

Already know the scope of your EMV L3 project?

Get an estimate with Benchmark
Start a certification

Tell us what you need to certify.

The more we know up front, the more precisely we can scope it. Please include:

  • Your processor and host or platform
  • The terminal model
  • Your deployment region
  • Entry modes and card brands
  • The transaction types required
  • Whether an application exists, and how ready it is
  • Your target launch date
  • Known external dependencies and access already secured
FIXED-SCOPE SOW · MILESTONE BILLING

Start your project

Sales online

Tell us about your project — we route you to the right specialist.

person
error_outlinePlease enter your name.
business
mail
error_outlinePlease enter a valid email address.
call
link
tune
error_outlinePlease tell us a bit about your project.

lock Your details go straight to our sales engineers — never shared or sold.