Software-based PIN Entry on COTS (SPoC) Solutions
The sunset period for the PCI Software-based PIN Entry on COTS (SPoC) Standard ended on 31 October 2026. New SPoC submissions are no longer accepted. Organizations developing new COTS-based mobile payment acceptance solutions are encouraged to refer to the PCI Mobile Payments on COTS (MPoC) Standard for information on PCI SSC’s current requirements for mobile payment acceptance. See the bulletin for more information.
Software-Based PIN Entry on COTS (SPoC) Solutions enable EMV contact and contactless transactions with PIN entry on the merchant’s consumer device using a secure PIN entry application in combination with a Secure Card Reader for PIN (SCRP). The Council, via PCI Recognized Laboratories, validates the conformance of SPoC solutions to the PCI Software-based PIN Entry on COTS Security Requirements and provides a list of approved solutions.
This listing is a resource for merchants and acquirers to use in selecting a Software-Based PIN Entry on COTS (SPoC) Solution.
SPoC Solutions with an Expired Validation - These are SPoC Solutions whose validation approval has expired as described in the SPoC Program Guide. Please contact the payment brands for information regarding the use of expired SPoC Products. SPoC Solutions with an expired validation are listed separately here.
For information regarding the PCI SPoC program, please click here for our document library.
Find a PCI Recognized Lab