EMV Level 3 certifies your complete payment application against a specific processor and card brand. Levels 1 and 2 are handled at the hardware layer before you ever touch the device. L3 is the work — it moves through user acceptance testing, host validation, pre-certification, and card-brand submission. Done with outsourced labs it takes 18–24 months. Done with in-house tooling and a real pre-cert pass, 5–12.
What "EMV Level 3" means
EMV is a three-stage certification framework that validates a payment terminal from the silicon up. The three levels aren't sequential steps in one project — they certify different layers of the stack, and they're usually completed by different parties.
Level 1 — the physical interface
Certifies the electrical and mechanical interface of the chip-card reader: how the terminal physically communicates with the chip. The terminal manufacturer almost always handles this before the device ships.
Level 2 — the EMV kernel
Certifies the embedded kernel software that runs the EMV transaction logic and talks to the chip on the card. Like L1, this is typically pre-certified at the hardware layer before the device reaches you.
Level 3 — the payment application, end to end
Certifies your complete payment application and its integration with each specific processor host and card brand. This is the stage that gets a terminal approved for live processor traffic. Without it, the device cannot process chip transactions through an acquirer network.
So when people say "we need EMV certification," they almost always mean Level 3. Levels 1 and 2 came in the box.
What L3 actually tests
Level 3 is not a single pass/fail check. It validates the full lifecycle of a transaction as your application implements it: transaction flow, message formatting between terminal and host, error handling, reversals, partial approvals, batch settlement, receipt formatting, and the specific behaviors each card brand requires. The goal is to prove that your application, running against one processor's host, produces correct and approvable transactions across the brand's complete test suite.
The four stages of an L3 project
Within a Level 3 engagement, the work moves through four phases. The industry-default 18–24 month timeline is a symptom of how the last phase is usually handled — not a law of physics.
User acceptance testing
Validate the application against the processor's specification — flow, error handling, receipts, edge cases. Issues caught here never reach the card brand, which is where they get expensive.
Host validation
End-to-end testing of the terminal-to-host connection: message formatting, timeouts, reversals, batch settlement, and the production-realistic flows lab testing often misses.
Pre-certification
Run the complete card-brand test suites in-house, before submission. This is the stage that separates 5–12 month projects from 18–24 month ones. No shared-lab queues, no waiting weeks for results.
Card brand submission
Submit to Visa, Mastercard, American Express, and Discover, manage findings directly, and coordinate with the processor through final approval — ending with a certification letter.
Timelines and cost, realistically
Two numbers dominate every EMV L3 conversation. Here's where they actually come from.
| Factor | Outsourced / shared lab | In-house tooling |
|---|---|---|
| Timeline | 18–24 months | 5–12 months |
| Cost per cert | $120K–$250K+ | A fraction of that |
| Testing | Rented lab access, queued | FIME / MV / ICC owned, run on demand |
| Defect discovery | After brand submission | During pre-certification |
| Billing | Hourly, frequent overruns | Fixed-scope SOW |
The cost isn't high because the work is mysterious. It's high because most vendors rent shared lab time, bill by the hour, and find defects at the most expensive possible moment — after submission. Owning the test tooling and running the brand suites before submission removes all three cost drivers at once.
The multi-processor reality
L3 certification is processor-specific. If you want to run on TSYS, Worldpay, and Global Payments, that's three certifications. The first is the slowest because the application is built from scratch. Subsequent processor certs on the same hardware typically move 30–50% faster — dramatically so if a multi-processor framework is designed in from day one rather than bolted on later.
Frequently asked questions
What are the three levels of EMV certification?
How long does EMV Level 3 certification take?
How much does EMV Level 3 certification cost?
Do I need a separate certification for each processor?
Why does EMV Level 3 certification take so long?
Need an L3 certification shipped?
Tell us the processor, the terminal, and the region. We return a fixed price, a milestone schedule, and a realistic completion date within 24 hours.
See EMV certification services