Skip to content
Sign InGet Started
Legal & Compliance  /  Financial & Compliance
In Process

PCI DSS Compliance Statement

Effective October 1, 2026Last updated October 1, 2026Contact compliance@drivemilli.com

1. Our Approach

The Payment Card Industry Data Security Standard ("PCI DSS") is the global security standard for organizations that store, process, or transmit payment card data. Milli's architecture is designed to minimize the cardholder data that Milli touches, so that sensitive card data is handled only by PCI DSS validated partners.

2. Scope

  • Milli Elite Card. Card numbers, expiration dates, and security codes for the Milli Elite Card are generated, stored, and processed by the issuing bank's card processor, which is validated as a PCI DSS Level 1 Service Provider. When you view your card details in the app, they are displayed through the processor's secure, tokenized interface and are not stored on Milli systems.
  • Subscription payments. Subscription payments are processed by Apple, Google, or a PCI DSS Level 1 validated payment processor. Milli does not receive or store full card numbers or security codes.
  • Milli systems. Milli stores only tokens, masked card numbers (last four digits), and transaction metadata.

3. Milli's PCI DSS Program: In Process

Milli's PCI DSS certification is in process. Milli does not currently hold a PCI DSS Attestation of Compliance. Because full cardholder data is handled by validated partners, Milli's compliance responsibility is limited to the controls applicable to its environment. Milli is completing the PCI DSS Self-Assessment Questionnaire appropriate to its integration and intends to obtain its Attestation of Compliance before the Milli Elite Card launches, along with any higher validation level required by its partners or the card networks.

4. How Card Data Is Protected

  • Tokenization of card data and encryption in transit (TLS 1.2 or higher) and at rest (AES-256)
  • Strict network segmentation between card-related services and other systems
  • Least-privilege access, multi-factor authentication, and access logging
  • Annual partner PCI DSS validation reviews, including Attestations of Compliance
  • Quarterly vulnerability scans and annual penetration testing, as described in our Security Policy

5. Requesting Documentation

Financial institution partners may request Milli's partners' Attestations of Compliance, and Milli's own PCI DSS documentation once complete, at compliance@drivemilli.com.

© 2026 Milli. All rights reserved. Questions about this document can be sent to support@drivemilli.com.

Related Documents
Financial DisclaimerMilli is not a licensed financial advisor or broker, and Milli AI is not a licensed CPA, attorney, or enrolled agent. Information is for informational purposes only.KYC/AML DisclosureIdentity verification required for the Milli Elite Card features.Regulation E Disclosure (Electronic Fund Transfers)Your rights for electronic fund transfers, error resolution, and liability for unauthorized transfers.Bank Secrecy Act (BSA) / AML Program StatementMilli's commitment to preventing money laundering and financial crime.FinCEN Compliance StatementMilli's comprehensive BSA, AML, SAR, CTR, OFAC, record retention, and information-sharing program.FinCEN / Money Services Business (MSB) DisclosureMilli's MSB registration status and how money transmission is handled.
View all Legal & Compliance
Milli is not a bank, broker, or licensed financial advisor. Milli is not FDIC insured and does not hold customer funds or offer deposit accounts. For informational purposes only. Milli is a tax preparation platform operated by an IRS-credentialed tax preparer, with IRS preparer credentials and IRS e-file credentials in place. Automatic Annual Tax Filing is available for Elite members; Electronic filing is available through Milli. Tax Vault, quarterly estimates, and Tax Ready Score are automation and calculation tools. Milli AI is not a licensed CPA, attorney, or enrolled agent; AI guidance is informational and not tax advice, and Milli has no financial interest in any product it mentions. Tree of Life, Milli Cents, and retirement and investing tools provide estimates and planning insight, not financial advice. Investing involves risk, including loss of principal. Milli is not a registered investment adviser or broker-dealer. Tax rules vary; consult a licensed professional for personalized advice. See our Financial Disclaimer, FDIC Disclosure, and Conflict of Interest & AI Disclaimer.