The PCI Security Standards Council (PCI SSC) has published a Mobile Payments on Commercial Off-The-Shelf (MPoC) Guidance Document, a new resource developed to support consistent interpretation and implementation of the MPoC Standard and Program requirements across the mobile payments ecosystem.

The MPoC Guidance Document provides additional context, examples, and interpretive details to help solution providers, laboratories, and other stakeholders better understand the intent behind specific MPoC requirements. The document complements the MPoC Standard v1.1 and the MPoC Program Guide v1.1, and addresses commonly asked questions received through feedback channels, technical working groups, and industry engagement sessions.

The document expands upon several core areas of the MPoC framework, including:

1. MPoC Product Types – Overview of the three MPoC product categories and how they interact
2. MPoC SDKs and MPoC Applications – Clarifications on relationships, dependencies, and integration expectations
3. MPoC Listings – Guidance on listing requirements and how they relate to product updates and dependencies
4. Vendor Verification – Clarification of MPoC SDK eligibility, guidance on the Integration report, and Q&As 

By expanding upon the foundational MPoC materials, this guidance helps stakeholders interpret requirements consistently, improve assessment readiness, and promote stronger, more reliable mobile payment solutions worldwide.

This Guidance Document reflects extensive collaboration with global stakeholders through the Council’s Mobile Working Group, Technology Guidance Group, and other community engagement channels. Feedback from solution providers, laboratories, payment brands, and acquirers was instrumental in shaping the content and ensuring it addresses real-world implementation challenges.

This collaborative effort underscores the Council’s commitment to transparency, continuous improvement, and practical guidance for emerging payment technologies.

The MPoC Guidance Document is now available in the PCI SSC Document Library. For additional background, readers can also refer to MPoC Standard v1.1, MPoC Program Guide v1.1, and MPoC Technical FAQs (v1.8, September 2025).