Scaling Fintech Innovative Products on Cloud: Enabling PCI Compliance with Payment HSM as a Service

Innovative fintech companies often require investment to take the next step in their growth journey. In some cases, this investment is driven by strategic priorities, while in others it is necessary to meet evolving regulatory and compliance requirements.
A key question for the industry is whether cybersecurity can move beyond being a cost center and instead act as a true growth enabler supporting scalability, enabling expansion into new markets, and strengthening operational resilience.
This blog explores how one fast-growing Polish fintech company, PinAppAll, successfully addressed this challenge while scaling its Soft POS and payment tokenization solutions across multiple markets.

On 9th of July, we will be hosting a live webinar with experts from Utimaco, IBM, and PinAppAll, who will dive deeper into this success full integration. 
Register here.
 

Business Perspective 

PinAppAll delivers modern payment and tokenization solutions for retailers, service providers, public transport operators, and deposit system providers. The company has experienced rapid growth and now operates across several European markets, including Poland, Lithuania, Estonia, Czech Republic, Germany, and Italy.

As part of its continued expansion strategy, PinAppAll is entering new markets across Europe and Asia while further developing its product portfolio.

This growth introduced a key challenge: ensuring compliance with PCI PIN requirements while maintaining agility and supporting continuous product innovation. As PCI compliance becomes increasingly critical in global payment ecosystems, the company required a secure foundation that would allow it to scale without compromising regulatory obligations.

To achieve this, PinAppAll needed a Payment Hardware Security Module (HSM) solution capable of delivering secure encryption and payment processing at scale, with high performance and global scalability.
 

Secure Deployment on IBM Cloud

PinAppAll built its payment infrastructure on IBM Cloud for Financial Services, an industry-focused cloud platform designed to help financial institutions run sensitive workloads securely while meeting strict regulatory and compliance standards.

Within IBM’s partner ecosystem, Utimaco provides Payment HSM as a Service, available via the IBM Marketplace, enabling secure and scalable cryptographic operations in a cloud-native environment.

Enabling Compliance Without Complexity

As PinAppAll expanded into new regions, it needed to meet PCI PIN requirements without increasing infrastructure complexity or slowing development. At the same time, the company aimed to build on its existing IBM Cloud environment rather than introduce additional operational overhead.

By adopting Utimaco’s Payment HSM as a Service within IBM Cloud, PinAppAll removed the need for dedicated on-premises HSM hardware. Instead, it adopted a fully managed cloud service delivering PCI PIN-certified cryptographic operations, including secure key management and payment transaction processing.

Apart from a fast way to compliance, cloud-hosted Payment HSM as a Service delivers other tangible benefits including: 

Reduced Costs

A flexible subscription model removes upfront hardware investments and reduces infrastructure overhead.

Fully Managed Service

HSM infrastructure is hosted in certified data centers, with compliance, maintenance, and operations fully managed.

PCI-Certified Security

Simplifies compliance with PCI-DSS, PCI PIN, and PCI P2PE standards, with audit-ready evidence available on demand.
 

“We are expanding globally in a highly demanding digital payments industry. We needed a reliable partner with top-tier technology and strong international presence. For us, IBM and Utimaco are the perfect match, delivering the confidence and high performance our clients expect.”
— Grzegorz Wojtenko, CEO, PinAppAll

Cybersecurity Business Enabler 

Cybersecurity investments do not have to slow innovation. When security and compliance are delivered as scalable cloud services, they can become an enabler of business growth, helping innovative companies expand faster while meeting the stringent requirements of the payments industry.

Learn more about PinAppAll business case here
 

Utimaco’s Trust as a Service Portfolio

Utimaco’s Trust as a Service portfolio here exemplifies the potential of Cybersecurity as a Service offerings. With a range of services designed to meet diverse security requirements, Utimaco provides businesses with the tools they need to secure their digital infrastructure.

Payment HSM as a Service provides a managed alternative to self-owned systems, reducing the burden on businesses while enabling them to fulfill the strict requirements of the financial and payment industry.

About the Author

Peter Czempas

Product Marketing Manager, Utimaco