Avaamo wins PCI DSS compliance for in-call voice payments

By AI, Created 11:19 AM UTC, May 20, 2026, /AGP/ – Avaamo says its voice AI platform has achieved PCI DSS compliance, letting contact center agents process payments during live calls without transferring customers to IVR or human handoff. The certification could let enterprises keep payment conversations inside a single interaction while meeting stricter card-data security rules.

Why it matters: - PCI DSS compliance lets Avaamo’s voice AI platform handle card payments inside a live conversation, which can reduce transfers, shorten call times and remove a common point of friction in contact centers. - The certification matters as PCI DSS 4.0 is now fully enforced and brings more voice AI components into scope when they can affect cardholder data security. - For enterprises that take billing, collections, subscription payments or account servicing calls, the change can keep customers from bouncing between an AI agent, IVR and a human agent.

What happened: - Avaamo announced it has achieved Payment Card Industry Data Security Standard compliance on its voice AI platform. - The validation was independently confirmed by a global certification and cybersecurity firm. - The company says the platform can process payments during live customer calls without transferring the caller to IVR, handing the call to a human or breaking the conversation. - Avaamo made the announcement on May 5, 2026, in Los Altos, California.

The details: - The platform is designed to keep cardholder data out of the AI environment rather than merely securing it after capture. - Avaamo uses DTMF-based card capture that suppresses tones from the audio stream and transcript. - The system uses SIP-level encryption across the telephony stack. - Avaamo applies just-in-time tokenization so full card numbers do not persist in the platform. - Real-time transcript monitoring redacts cardholder data patterns even when customers speak their card numbers aloud. - The company says the result is a single, natural conversation while payment processing happens securely behind the scenes. - Avaamo says the platform can now guide a customer from “I’d like to pay my bill” to “Your payment of $247.50 has been processed” without a transfer. - In the company’s description, most AI payment tools still operate in text, where a customer types card details into a secure form and the chatbot never sees the data.

Between the lines: - Voice payments are harder to secure than text-based payments because spoken card numbers can move through speech recognition, transcription, model context windows, call recording and logging systems. - PCI DSS compliance is therefore less a feature add-on and more a platform architecture test for voice AI vendors. - Avaamo is positioning compliance as a proof point for enterprise readiness, not just a product capability. - CTO Sriram Chakravarthy said the company built for harder compliance use cases first, including HIPAA, FINRA and PCI DSS, and said the work takes years to build and months to audit.

What’s next: - Avaamo is likely to use the certification to push deeper into enterprise contact centers that want AI-led payments without a handoff. - The company’s pitch now centers on secure end-to-end customer interactions, especially in regulated industries and payment-heavy workflows. - As PCI DSS 4.0 enforcement tightens, more voice AI vendors may need to show similar controls or risk being excluded from payment use cases.

The bottom line: - Avaamo is betting that compliance can become a product advantage, letting voice AI handle payments in one conversation while meeting stricter card-data security rules.

More information