generated: '2026-07-20'
method: derived
source: openapi/payabli-api-reference-openapi.json
docs: https://payabli.com/security/
standards:
- id: oauth2-client-credentials
  conforms: true
  evidence: OpenAPI securityScheme BearerAuth — OAuth2 client-credentials Bearer access token.
- id: api-key-auth
  conforms: true
  evidence: OpenAPI securityScheme APIKeyAuth — requestToken header.
- id: rfc7807-problem-details
  conforms: true
  evidence: v2 Money In endpoints return RFC 7807 Problem Details on 500 (per API overview + spec).
- id: idempotency-keys
  conforms: true
  evidence: idempotencyKey header documented with 2-minute retention.
- id: openapi-3.1
  conforms: true
  evidence: API published as OpenAPI 3.1.0 (255 operations, 915 schemas).
- id: pci-dss
  conforms: true
  evidence: PCI DSS 4.0 adherence stated on payabli.com/security; PCI-certified embedded UI components.
- id: soc2
  conforms: true
  evidence: SOC 2 compliance stated on payabli.com/security.
- id: rfc9457-problem-details
  conforms: false
  evidence: Uses RFC 7807 (predecessor); application/problem+json not declared in spec.
- id: fapi
  conforms: false
- id: fhir-r4
  conforms: false