Security and compliance at AgentaOS
AgentaOS is not a bank. Buyers pay Aristokrates OÜ as seller of record. Card processing and payouts run through licensed Payment Partners. We do not take deposits and we do not hold client money. Your Balance is a contractual claim on us, paid out under the Master Services Terms, Section 8.
How money moves
- 1
The Buyer pays Aristokrates OÜ as seller of record.
- 2
Stripe acquires the card (Apple Pay and Google Pay too). Card data stays in Stripe's PCI DSS hosted fields. We never store a full card number.
- 3
Proceeds settle on Bridge's e-money rails. Those funds are Aristokrates OÜ's, with Bridge, not a deposit in your name.
- 4
Your Balance is a contractual claim on Aristokrates OÜ. It is not client money, escrow, or an interest in specific funds.
- 5
Wise pays that claim out to your own bank account, on the schedule in your account, subject to verification and any Reserve.
If Aristokrates OÜ is insolvent, an unpaid Balance is an unsecured claim against that company. It is not a claim on Stripe, Bridge or Wise, and it is not safeguarded client money.
Card data and PCI DSS
Card details are collected by Stripe through Stripe's PCI DSS hosted fields. AgentaOS never sees, transmits or stores a full primary account number. Merchants using the AgentaOS checkout do not bring their own systems into PCI scope for that checkout.
Reserves and payouts
A Reserve is a portion of amounts payable to you, set aside for buyer refunds and chargebacks; it is not customer money we keep. New accounts: 15% of each sale is set aside for 120 days. After 90 days, 50 settled card sales, €25,000 / $25,000 settled volume and a dispute rate below 0.5%, that becomes Open payout (0%). See Section 9. New accounts also have an incoming clearance of about 14 days. If a Payment Partner freezes funds attributable to your sales, that Payout waits; unaffected payouts still go. Details in Section 8.
Payment partners
| Stripe | Card acquirer. Cards, Apple Pay and Google Pay. PCI DSS Level 1 hosted fields. We do not store PANs. |
|---|---|
| Bridge | Electronic-money settlement. Publicly an EMI licensed in Luxembourg by the CSSF (Bridge Building). Proceeds sit with Bridge as Aristokrates OÜ's funds, not as client money for you. |
| Wise | Bank partner. Payouts to your account in EUR or USD. |
We may add or change partners. The current stack is what we use now. Your Balance remains a claim on Aristokrates OÜ either way. We have not published partner company-registry numbers here because the contracting entity is set in each partner agreement, not guessed on this page.
Data protection and GDPR
Aristokrates OÜ is an EU-established controller for its own processing and a processor for merchant customer data. We publish a Data Processing Agreement with Article 28 terms and a named sub-processor list, and a Privacy Policy covering lawful bases, retention and international transfers.
Fraud and disputes
Because AgentaOS is the merchant of record, chargebacks are filed against Aristokrates OÜ rather than against the merchant. We run pre-authorisation fraud screening, support 3D Secure and Strong Customer Authentication at no charge, and contest illegitimate disputes with the card networks. See the Master Services Terms for how dispute costs are allocated.
The legal entity
| Legal name | Aristokrates OÜ |
|---|---|
| Registry code | 16961316 |
| EU VAT number | EE102810130 |
| Jurisdiction | Estonia, European Union |
| Registered office | Tallinn, Estonia |
| Phone | +372 589 89 589 |
| Role | Merchant of Record and seller of record on every card sale |
This is the entity that appears on your buyer's invoice, card statement and receipt, and the entity that carries the chargeback liability.
Card data is taken by Stripe and never stored on AgentaOS servers. Data is encrypted in transit and at rest. Your Balance is a claim on Aristokrates OÜ, paid out when due under the Terms.
Reporting a security issue
Email [email protected]. We aim to acknowledge reports within two business days.
Last updated .