What program controls does QorPay run?
Three named systems, all built and operated in-house. Automated Underwriting is the policy engine at the front door; Circuit Breaker watches exposure limits in-line, with enforcement staged per portfolio as each control clears review; Network Compliance Monitoring keeps merchants inside card-brand rules after boarding.
- Automated Underwriting: KYC/KYB, beneficial ownership, match-list screening, and risk scoring under a written credit policy, with documented exception queues for human review.
- Circuit Breaker: real-time controls deployed in the authorization path that catch anomalous transaction flow before exposure accumulates, enforcement staged per portfolio.
- Network Compliance Monitoring: continuous tracking of card-brand rule standing, registrations, and program thresholds.
Because the systems are named and documented, a control question has a specific answer: which module, which rule, which log.
How does QorPay monitor merchant risk after boarding?
Continuously and in-line. Circuit Breaker evaluates transaction flow as it happens, against velocity limits, ticket-size bands, and exposure caps set per merchant at underwriting.
Beyond in-line controls, monitoring watches for the patterns that indicate a merchant has changed: volume deviating from the underwritten profile, MCC drift, rising dispute counts, and settlement anomalies. Defined triggers open a re-underwriting review with the file, the trigger, and the disposition recorded. Detection does not wait for a monthly report to be read.
As automation deepens across the program, one principle is fixed: every control is an audited pathway. Any automated system on this platform reads from the settlement ledger and acts only through the same recorded, human-gated steps an operator would take, so what your examiners ask for is what the platform already produces. Provable beats promised.
What oversight and reporting do partner banks receive?
Full program visibility: portfolio composition, boarding and decline activity, exposure and reserve positions, dispute rates, and risk-event dispositions. Reporting is settlement-grade, from the same ledger that moves the money.
And your team pulls it themselves. The Sponsor Portal gives your risk and compliance staff self-serve, read-only access to the full bank report set, scoped to your program: run a report on demand, download it as PDF or CSV, and review what has been delivered on schedule. There are no passwords to manage; access is granted to named contacts and revoked the moment you ask, sign-in is a one-time link and code, and every access is logged to a trail your institution can pull as a report of its own. Oversight between reviews, on your schedule, not ours.
Underwriting policy, monitoring procedures, and PCI documentation are available for examination support. When an examiner asks how a merchant was approved or why a halt fired, the answer is a record on the platform, not a reconstruction.
Schedule a program review: your risk team, our operators, the live platform on screen.
Who already sponsors QorPay?
QorPay is a registered Payment Facilitator of Pathward, N.A. (Sioux Falls, SD). It is also a registered ISO of Synovus Bank (Columbus, GA) and Chesapeake Bank (Kilmarnock, VA).
Those registrations mean the program has already passed sponsor diligence and operates under it today. A new sponsor relationship starts from an examined program, not a proposal.
Evaluating QorPay for sponsorship? Talk to Sales and we will bring the full program documentation to your diligence team.
How is cardholder data handled?
Tokenized at capture and vaulted on PCI DSS Level 1 infrastructure that QorPay operates and is assessed on annually by a Qualified Security Assessor. Merchants and platforms integrate through hosted and embedded capture, which keeps primary account numbers off their systems and out of program scope.
For healthcare portfolios, the platform is also HIPAA compliant, so patient payment flows do not create a separate compliance gap. Architecture and scope detail live on the security page.