Evidence · RBI-REQ-035

PayGate: mTLS enforced on payout API

AcceptedAutomated test resultCollected 4 Oct 2026

Requirement to validation

Requirement
ISO-A.8.24 · ISO-A.8.5 · RBI-DPSC-2021-4 · SOC2-CC6.1 · SOC2-CC6.7
mapped
Policy
Payments Security Policy
pol-payments
Control
PAY-01
Payment APIs secured with mTLS, signing and customer 2FA
Application
PayGate Payment Gateway · Meridian Customer Portal
mapped
Evidence · Q3
2 items
2 approved · 0 pending · 0 rejected
Test · Q3
Pass
TST-RBI-PAY-01 · High confidence
Finding
F-IAQ2-PAY-01 · High
Closed
Action
Deepa Menon
REM-F-IAQ2-PAY-01 · Closed
Validation
Validated
as recorded

Record

Control
PAY-01 · Payment APIs secured with mTLS, signing and customer 2FA
Source system
Cycle
Q3 2026 Unified Program Review
Review note
Evidence reviewed against the control requirement; complete and accepted.
Provenance
PBC request REQ-035 · RBI Regulatory Controls — Q4 2026 Periodic Internal Audit