L1 · L2 · L3 · certification & development

Certify every layer of the terminal

L1 hardware, L2 kernel and L3 host, run by one team.

Kernel-level expertise and Studio tooling for every stage of EMV certification — from gap analysis to lab sign-off.

EMVCo L1, L2 and L3 · scheme certification · kernel engineering

KernelChipTerminalContactlessCryptoHostSchemeLabEvidence

L1 contact plate to L3 host response

One continuous path from the contact plate on the terminal to the authorization response coming back off the scheme.

EMV Level 1L1

Electrical, mechanical and protocol conformance — ATR handling, contact interfaces and contactless RF behaviour.

ContactContactlessATRProtocol

EMV Level 2L2

Kernel behaviour, application selection, data authentication, cardholder verification and terminal risk management.

SDADDACDACVM

EMV Level 3L3

Acquirer and scheme integration testing — transaction flows against host systems, from sale to settlement.

TerminalHostSchemeSettlement

Six steps to sign-off

The same sequence on every engagement, whether the scope is one contactless kernel or a whole acceptance estate.

01 / Define the scope

Assessment & planning

Map your terminal or host stack against target requirements. Identify gaps and build a certification plan with clear milestones.

Gap analysisTest scopeMilestones
Running through the process01 / 06

Cryptography, contactless, schemes and host APIs in one team

The disciplines a certification programme actually touches, in one team.

Security & cryptography

Cryptogram validation, data authentication, key management and HSM integration.

Mobile & contactless

Contactless kernels, mobile wallets and tokenized acceptance flows.

Global standards

EMVCo, ISO 8583, ISO 9564 and scheme requirements applied to your stack.

Performance engineering

Transaction timing, EMV tag optimization and terminal responsiveness under load.

Integration & APIs

Terminals, hosts, switches and gateways over TCP/IP, RS232 and REST.

Testing & QA

Repeatable regression suites with simulated hosts, HSMs and card profiles.

Certification questions

Scope, kernels, lab submission and what happens after sign-off.

All three. Level 1 for the electrical, mechanical and protocol layer, Level 2 for kernel behaviour and card processing, Level 3 for acquirer and scheme end-to-end acceptance — plus the scheme-specific test plans that sit on top.

Yes. Most engagements start from a terminal and kernel you already have. We map the current configuration against the target requirements, then work through the gaps rather than replacing what already passes.

Pre-certification runs happen on your machine against simulated hosts, HSMs and card profiles, so defects surface before the lab slot instead of during it. Failing cases replay deterministically with the same keys, clock and responses.

We prepare and coordinate it: log packages, evidence bundles and submission paperwork, then work through lab findings with a defect-resolution loop until sign-off.

Rollout support, parameter management across the estate, and a plan for the next kernel update or re-certification window so the approval does not expire unnoticed.

EMVCo Level 1, 2 and 3 specifications, ISO 8583 and ISO 9564, plus scheme requirements from the networks your acceptance environment needs to support.

Scope your certification

Tell us about the terminal, kernel or host project and we will map the route to sign-off.

Goes straight to a human. No newsletter, no sharing.
Your next milestone

Ready to certify?

Tell us about your terminal, kernel or host project. We map the fastest route to certification and where Studio tooling removes lab cycles.

Kernel-levelLab-ready evidenceRe-certification