Security and compliance at AgentaOS
AgentaOS is not a bank. Buyers pay Aristokrates OÜ as seller of record. Card processing and payouts run through licensed Payment Partners. We do not take deposits and we do not hold client money. Your Balance is a contractual claim on us, paid out under the Master Services Terms, Section 8.
Card data and PCI DSS
Card details are collected by Stripe through Stripe's PCI DSS hosted fields. AgentaOS never sees, transmits or stores a full primary account number. Merchants using the AgentaOS checkout do not bring their own systems into PCI scope for that checkout.
Where money sits
The buyer pays us for our sale. Card proceeds are received through Stripe and settled on Bridge's e-money rails. Those proceeds are our funds with those partners. Your Balance is not an interest in specific funds, not a deposit, and not escrow. Payouts go to your own bank account through Wise, in EUR or USD, on the schedule in your account, subject to verification and any Reserve. A Reserve is a portion of amounts payable to you, set aside for buyer refunds and chargebacks; it is not customer money we keep. New accounts: 15% of each sale is set aside for 120 days. After 90 days, 50 settled card sales, €25,000 / $25,000 settled volume and a dispute rate below 0.5%, that becomes Open payout (0%). See Section 9. New accounts also have an incoming clearance of about 14 days. If a Payment Partner freezes funds attributable to your sales, that Payout waits.
Payment partners
| Stripe | Card acquirer. Cards, Apple Pay and Google Pay. PCI DSS hosted fields. |
|---|---|
| Bridge | Electronic money institution. Settlement of proceeds. |
| Wise | Bank partner. Payouts to your account. |
We may add or change partners. The current stack is what we use now. Your Balance remains a claim on Aristokrates OÜ either way.
Data protection and GDPR
Aristokrates OÜ is an EU-established controller for its own processing and a processor for merchant customer data. We publish a Data Processing Agreement containing Article 28 terms and annexes covering processing details, security measures and sub-processors, and a Privacy Policy covering lawful bases, retention periods and international transfers.
Fraud and disputes
Because AgentaOS is the merchant of record, chargebacks are filed against Aristokrates OÜ rather than against the merchant. We run pre-authorisation fraud screening, support 3D Secure and Strong Customer Authentication at no charge, and contest illegitimate disputes with the card networks. See the Master Services Terms for how dispute costs are allocated.
The legal entity
| Legal name | Aristokrates OÜ |
|---|---|
| Registry code | 16961316 |
| EU VAT number | EE102810130 |
| Jurisdiction | Estonia, European Union |
| Registered office | Tallinn, Estonia |
| Phone | +372 589 89 589 |
| Role | Merchant of Record and seller of record on every card sale |
This is the entity that appears on your buyer's invoice, card statement and receipt, and the entity that carries the chargeback liability.
Card data is taken by Stripe and never stored on AgentaOS servers. Data is encrypted in transit and at rest. Your Balance is a claim on Aristokrates OÜ, paid out when due under the Terms.
Reporting a security issue
Email [email protected]. We aim to acknowledge reports within two business days.
Last updated .