# Security and Compliance

Learn how Finix handles security and your compliance obligations.

Finix is PCI Service Provider Level 1 certified and undergoes regular vulnerability scanning and penetration testing. All material findings are documented, reviewed, and remediated within 30 days of discovery.

## Learn More

[**PCI DSS Compliance**  
Learn how Finix helps you validate merchant compliance on an annual basis.](https://docs.finix.com/guides/managing-operations/security-compliance/pci-dss-compliance)  
[**Managing PCI Compliance**  
Learn how to comply with the PCI DSS using Finix.](https://docs.finix.com/guides/managing-operations/security-compliance/managing-pci-compliance)  
[**Approved MCCs**  
Learn about the sellers and MCCs that are approved to process payments on Finix.](https://docs.finix.com/guides/managing-operations/security-compliance/approved-merchant-category-codes)  
[**Website Requirements**  
Find out what is required on your website to process payments.](https://docs.finix.com/guides/managing-operations/security-compliance/website-requirements)  
[**1099-K Tax Forms**  
Learn how Finix handles security and your compliance obligations.](https://docs.finix.com/guides/managing-operations/security-compliance/1099k)