Apata

What Apata does

Apata is a Dublin-based B2B payments authentication platform that provides EMV 3-D Secure (3DS) solutions to card issuers, Banking-as-a-Service platforms, traditional banks, fintechs and neobanks, acquiring banks, and single merchants. The company was established in 2021, building on the technology foundation of Touchtech Payments (founded 2014 and acquired in 2019), and operates two core product lines: a 3DS Access Control Server (ACS) for issuer-side authentication and a 3DS Server (MPI) for acquirer/merchant-side authentication. These are delivered through five segment-specific variants supported by six platform modules — Multi-Scheme Support (Visa, Mastercard, Amex, Discover and regional schemes), Command & Control (multi-tenant delegation), Advanced Reporting, Merchant Simulator, Experiment & Test (backtesting), and Transformational Troubleshooting.

The underlying platform is built on RESTful APIs aligned with EMV 3-D Secure 2.x specifications, with active-active infrastructure, real-time failover, and built-in DDoS and BIN attack protection. Apata holds EMVCo approval, ISO/IEC 27001:2022 certification, PCI Security Standards Council membership, and scheme certifications from Visa, Mastercard (Click to Pay), and American Express (SafeKey). The platform supports PSD2 and SCA compliance and processes structured transaction data for risk profiling, anomaly detection, and predictive fraud decisioning.

Apata monetizes through quote-based subscription and usage-based pricing on annual billing cycles. Go-to-market combines direct enterprise sales targeting issuers, processors, and banks with an API-first self-service distribution model accessible via a developer portal. Distribution is augmented by BaaS platform embedding, where partners resell or white-label 3DS ACS to their downstream bank customers. Named enterprise customers include Wise, Thredd, Nu, Enfuce, Edenred, Galileo, Lithic, and Dock. The company is privately held and has disclosed one $5 million funding round (May 2023) from investors including AAF Management, Global Founders Capital, Rocket Internet, and others, with Enterprise Ireland providing ecosystem support.

Name

Apata

Legal name

Apata Limited

Website

https://apata.com

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Short description

Apata is a Dublin-based B2B payments authentication platform that provides EMV 3-D Secure (ACS and MPI) solutions to card issuers, BaaS platforms, banks, fintechs, and merchants, with multi-scheme support and subscription-based usage pricing.

Ownership category

akta.pro rank

Product category

3D Secure Payment Authentication

NAICS

Financial Transactions Processing, Reserve, and Clearinghouse Activities (522320), Software Publishers (513210), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)

SIC

Services-Prepackaged Software (7372), Finance Services (6199), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

3-D Secure (3DS) & Authentication Services (FSAMACAD)

akta.pro secondary industries

Embedded Payments (Pay-ins, Pay-outs, Wallets) (FSAGALAB), A2A Checkout & Merchant Acceptance Solutions (FSAMAFAF)

Keywords

• 3D Secure authentication
• Payment fraud prevention
• Access control server
• Cardholder verification
• Strong customer authentication

Headquarters

HQ city

Dublin

HQ country

Ireland

HQ region

Europe

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations

Revenue model

1. 3DS ACS and Server Services: Subscription and usage-based revenue model for 3D Secure Authentication Services. Pricing includes single endpoint integration with access to all product benefits including DDoS protection, authentication methods, compliance, and analytics.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels3 records

Core offering

Apata provides an EMVCo-approved 3D Secure (3DS) authentication platform for the payments ecosystem. The platform consists of a 3DS Access Control Server (ACS) for issuers, banks, fintechs, neobanks, and BaaS platforms to authenticate cardholder e-commerce transactions, and a 3DS Server (MPI) for acquiring banks and individual merchants. Supporting modules include multi-scheme support, multi-tenant command and control, advanced reporting, merchant simulation, backtesting, and transformational transaction troubleshooting, sold as subscription and usage-based services to enterprise clients.

Product overview

Apata is a B2B payments authentication platform specializing in 3D Secure (3DS) solutions. The product architecture consists of two core components: the 3DS ACS (Access Control Server) for issuers, banks, fintechs, and BaaS platforms to authenticate cardholder e-commerce transactions; and the 3DS Server (MPI/Merchant Plug-In) for acquiring banks and single merchants. These are offered in five variants targeting different segments: 3DS ACS for Issuers & BaaS Platforms, 3DS ACS for Traditional Banks, 3DS ACS for Fintechs & Neobanks, 3DS Server for Acquiring Banks, and 3DS Server for Single Merchants. Supporting these core products are six platform modules: Multi-Scheme Support (covering Visa, Mastercard, Amex, Discover, and regional schemes), Command & Control (multi-tenant delegation and governance), Advanced Reporting (real-time analytics and compliance reporting), Merchant Simulator (safe testing environment), Experiment & Test (backtesting and parallel flow comparison), and Transformational Troubleshooting (transaction visibility). The company was established in 2021 building on technology from Touchtech Payments (founded 2014, acquired 2019).

Differentiator

Problem solved

Functional benefit

Products and services

• 3DS ACS for Issuers & BaaS Platforms A multi-tenant 3DS Access Control Server designed for issuing processors and Banking-as-a-Service platforms, enabling rapid deployment across multiple markets with full self-service capabilities for policy control, branding, and user flows. It allows BaaS providers to serve multiple downstream bank customers with delegatable permissions and PCI-compliant authentication.
• 3DS ACS for Traditional Banks A 3DS Access Control Server variant designed for established banks, featuring resilient infrastructure with real-time failover, high availability, custom policy logic, and bespoke authentication flows for integration with legacy core systems.
• 3DS ACS for Fintechs & Neobanks A dedicated 3DS Access Control Server for fintechs and neobanks, featuring active-active infrastructure, low-latency performance, built-in failover, and full customization of authentication experience including branding, risk logic, and fallback behavior through APIs.
• 3DS Server (MPI) for Acquiring Banks A multi-tenant 3DS Server (Merchant Plug-In) designed for acquiring banks managing large merchant portfolios, supporting granular per-merchant policy control, policy delegation, and advanced analytics for real-time insight into performance, friction, and fraud outcomes.
• 3DS Server (MPI) for Single Merchants A lightweight, PCI-compliant 3DS Server (Merchant Plug-In) designed for single-merchant deployment, with most merchants able to go live in under a week with minimal engineering effort. Includes built-in analytics for visibility into approvals, declines, challenges, and abandonment.
• Developer Integration Portal A developer-facing portal providing RESTful APIs aligned with EMV 3-D Secure 2.x specifications. Enables developers to handle card enrollment, authentication, and testing with single API call integration for real-time performance, with documentation accessible via the portal at https://portal.apata.io/.

Quantifiable outcome

• 7-day migration with single endpoint
• +4 more outcomes

Named customers8 records

Segments5 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability3 records

Feature9 records

Scale indicators1 record

Recent moves7 records

Expansion highlights5 records

Direct peers

• CardinalCommerce (Visa): CardinalCommerce is one of the largest 3DS ACS/ MPI providers, now owned by Visa. It directly competes with Apata for issuer, acquirer and merchant 3DS authentication volume, offering similar scheme coverage and risk decisioning.
• Entersekt: Entersekt provides 3-D Secure and authentication solutions to banks and issuers globally, including PSD2-compliant SCA. It overlaps directly with Apata's issuer ACS offering and competes for the same issuing bank and processor customers.
• GPayments: GPayments is an Australia-based 3DS Server (MPI) and ACS provider serving merchants, acquirers and issuers. It competes head-to-head with Apata in 3DS authentication, particularly with multi-scheme and regional scheme support.
• Netcetera: Netcetera offers a 3DS Access Control Server and 3DS Server used by issuers, acquirers and merchants across Europe and globally. Its product scope and target buyer (banks, payment processors) overlap materially with Apata.

Broad incumbents

• RSA Security (fraud & risk): RSA (part of the SymphonyAI / former Dell/ Broadcom ecosystem) sells enterprise fraud detection, adaptive authentication and risk-based authentication. It is a broader incumbent that competes with Apata in issuer authentication and risk decisioning.
• Featurespace: Featurespace provides adaptive behavioral analytics for fraud and risk management, used by issuers and payment processors. It competes with the risk-profiling and fraud-detection layer of Apata's platform for the same issuing customers.
• Feedzai: Feedzai offers AI-based fraud and financial crime detection across banking and payments. It competes with Apata's fraud/risk analytics capabilities within issuer and processor deployments.
• Sift: Sift provides digital trust and fraud-prevention APIs for issuers, acquirers and merchants. It overlaps with Apata's risk-decisioning layer and competes for the same digital-first fraud-prevention budgets.
• Nexi / Nets 3DS offering: Nexi (including the legacy Nets business) provides 3DS authentication, issuer processing and acquiring services across Europe. As a major European payments incumbent, it competes with Apata for both issuer ACS and acquirer MPI contracts.
• Outseer (RSA/ Early Warning spinoff): Outseer (formerly RSA Fraud & Risk Intelligence, now owned by Early Warning Services) sells 3-D Secure and fraud-prevention solutions to issuers and acquirers. It competes directly with Apata in the issuer ACS market and benefits from a large established customer base.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/apata-ltd

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds1 record

Investors6 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Apata