Case Study: Zilch achieves PCI Level 1 compliance and eliminates its card data environment with Very Good Security (VGS)

Zilch Goes Zero Data for 3x Faster PCI Level 1 Compliance

Zilch, a fast-growing BNPL payments platform, needed to upgrade its PCI compliance from Level 3 to Level 1 while preventing sensitive cardholder data from ever touching its in-house network. To achieve a “zero data” architecture and streamline audits, Zilch partnered with Very Good Security, implementing VGS Control and VGS Vault to remove card data from their environment.

Very Good Security configured a tokenization and proxy flow so payment and PII data bypass Zilch’s systems, eliminating their card data environment (CDE) and narrowing compliance scope. As a result, Zilch reached PCI DSS Level 1 at least 3x faster (reducing a six‑month effort to about one–two months), built its US environment in less than a third of the previous timeline, and now uses the VGS Control dashboard to accelerate audits and global expansion while keeping card numbers and SSNs out of their network.

Zilch

Sean Hederman

Chief Information Officer