pagoPA and PSD2: the ACI Informatica case | Daevon
Back to case studies
Daevon
ACI Informatica
Case Study · Public Administration and Mobility

Zero non-compliance risk on pagoPA payments

ACI Informatica processes millions of citizen transactions in line with PSD2 and pagoPA, without having to track every regulatory and security obligation in-house.

PSD2
Native compliance
24/7
Guaranteed uptime
B2G
Service model
The Solution

One engine to orchestrate B2G transactions

Daevon supplies a modular enterprise architecture, the intelligent middleware between ACI's portals, Payment Service Providers (PSPs) and ministerial nodes.

Explore the API architecture

Automatic SCA

Native integration of the 3D Secure 2.0 protocol: strong citizen authentication runs with no added checkout friction.

pagoPA middleware

Certified interface module that translates and routes requests to the national node per AGID standards.

Enterprise deployment

High-availability servers that absorb telematic traffic spikes on tax-deadline days without downtime.

Results

Compliance achieved, zero interruptions

The infrastructure passed institutional testing, handling the projected national volumes without a hitch.

100%
Regulatory compliance
Full adherence to PSD2 and pagoPA
Zero
Service downtime
Absolute continuity during traffic peaks
-30%
Development time
Thanks to Daevon's ready-made APIs
Secure
Data handling
PCI-DSS Level 1 certified environment
Integrated technologies

Institutional reliability

The key components behind the citizen services hub.

Enterprise API Gateway

A single, load-balanced, scalable access point for every payment authorisation request.

PSD2/3DS module

A dedicated engine that negotiates strong customer authentication with issuing banks in real time.

pagoPA connector

A specialised interface for correctly exchanging Telematic Receipts (RT) with the SPC node.

Vault as a Service

Secure offloading of sensitive data, so internal servers never carry the PCI-DSS certification burden.

Backoffice dashboard

An interface reserved for operators to run logistics analysis and extract data for reconciliation.

Smart Redirect

Optimised flows from the body's web portals and mobile apps to secure payment pages.

Testimonial

"Adopting the Daevon platform let us speed up our path to PSD2 regulatory compliance and pagoPA integration, giving us a solid, secure infrastructure able to meet the scalability challenges a nationwide service demands every day."

Project Management
ACI Informatica
Frequently Asked Questions

Public-sector payments and compliance, in detail

Daevon acts as a middleware module: when the public body requests a payment, the system formats the transaction to AGID standards, talks to the SPC Payment Node, and returns the Telematic Receipts to the management software.

PSD2 requires Strong Customer Authentication (SCA) on online payments. Daevon integrates 3D Secure 2.0 engines that verify the payer's identity with the issuing bank in real time, blocking fraud while allowing the exemptions set for low-risk transactions.

For Enterprise and public-sector projects, we run high-availability server clusters (HAaaS) and intelligent load balancers that scale cloud resources horizontally as soon as an anomalous rise in API requests is detected.

No. Sensitive data (PAN) never passes through or resides on the body's servers. Daevon tokenises it in PCI-DSS Level 1 certified environments, returning only an alphanumeric token to the body for further processing.

Running complex transactional systems?

See the enterprise architecture national technology centres choose to orchestrate millions of secure operations.