Aller au contenu
Vérifié indépendamment · Ré-audit trimestriel
EU VETTED

Dintero

VéRIFIé
Paiements · Norway
Fondé en 2017 · dintero.com ↗

Oslo fintech (Dintero AS) — Finanstilsynet-authorised PI and, since 2025, the only Norwegian-owned direct Visa/Mastercard acquirer; checkout for e-com, marketplaces and physical retail.

En bref

Dintero, dans la catégorie Paiements, est un service européen avec Norway comme lieu d’hébergement et tout au plus une exposition américaine mineure et transitoire au titre du CLOUD Act.

Notes d’évaluation

Dintero AS (Oslo, org.nr 919 656 395, founded 2017 by Daro Navaratnam) is a Finanstilsynet-authorised payment institution with EEA passporting and, since April 2025, a full principal Visa/Mastercard acquiring licence — making it, on its own framing, the only Norwegian-owned direct Visa/Mastercard acquirer (Norway's first new acquirer in 20+ years). It is a PCI DSS Level 1 Service Provider and a GDPR data controller. Ownership is genuinely clean-Nordic: Schibsted Ventures (NO), Bring Ventures (NO, Posten/Bring), CoFounder (NO) and Harding Invest (NO), with Mastercard Lighthouse (US accelerator) as a minor program investor — no US PE/VC control, so ownership_signal: other (Norway, EEA but non-EU) is a sovereignty positive. The drag on the compliance score is transparency: no self-serve standalone DPA (it lives as Annex 1 to the merchant agreement), no public named sub-processors list, and the cloud substrate is not publicly disclosed — so cloud_act_exposure: minor is set defensively (card-scheme Visa/Mastercard connectivity is payment rails, not data-at-rest exposure; the data-at-rest hosting provider is simply unverified). Caps at 4/5 pending a public DPA + named-hosting disclosure.

CLOUD ACT
OWNERSHIP
SUB-PROCS
non divulgué
Signaux vérifiés
Juridiction
  • Hébergement UE / adéquation
  • Opérateur UE / adéquation
  • Aucune exposition au CLOUD Act
Transparence
  • DPA public
  • Sous-traitants divulgués
  • Clients open source
  • Certification tierce
JUMP TO
OVERVIEW

À propos de Dintero

Dintero is an Oslo-headquartered Norwegian fintech operated by Dintero AS (Nydalsveien 36A, 0484 Oslo; org.nr 919 656 395), founded in 2017 by Daro Navaratnam and team (ex-dSAFE, which was acquired by Bambora). It delivers a unified checkout and payment platform — Dintero Checkout — for online stores, platforms, marketplaces and physical retail, bundling cards, Vipps, Swish, invoice and financing (BNPL), payment links, recurring billing, in-person/POS and marketplace split-payment flows, plus adjacent CRM/loyalty tooling. The company is authorised as a payment institution under the Norwegian Financial Supervisory Authority (Finanstilsynet) with EEA passporting across the EU/EEA, and in April 2025 went live as a principal Visa acquiring member, completing a ~three-year process to become a direct Visa/Mastercard acquirer — which the company markets as the only Norwegian-owned direct acquirer and Norway's first new acquirer in over 20 years. Going direct means Dintero controls the chain from point-of-sale to the card networks without an intermediary acquirer.

For an EU/EEA-sovereignty audit Dintero is one of the cleanest ownership stories in the payments category. Total external funding is small (~US$5-7M over a handful of rounds) and the cap table is overwhelmingly Nordic: Schibsted Ventures (Norwegian media group's venture arm), Bring Ventures (the venture arm tied to Posten Bring, the Norwegian state postal group), CoFounder and Harding Invest (both Norwegian), with Mastercard Lighthouse — Mastercard's Nordic startup-engagement programme — as a minor US-linked participant. There is no US private-equity or US-VC controlling stake, no US parent, and no Delaware operating entity. Because Norway is EEA but not EU, ownership is flagged other (a sovereignty positive, not the US-funded caveat that weighs on Mollie/Trustly/Klarna/SumUp). The honest caveat is infrastructure transparency: Dintero does not publicly name its hosting/cloud provider or data-residency region, publishes no standalone self-serve DPA (data-processing terms sit as Annex 1 to the merchant agreement) and no named sub-processors list (the privacy policy references an unnamed "infrastructure provider"). The Visa/Mastercard scheme connectivity is unavoidable US-headquartered payment rails and is distinct from where customer/transaction data is stored — the data-at-rest substrate here is simply unverified, so the CLOUD Act flag is set to minor defensively rather than none.

Pricing is sales-led / volume-negotiated (no public per-transaction rate card), with merchant onboarding via Dintero's own back-office and plugins for WooCommerce, Magento, NopCommerce and Optimizely. Best fit: Norwegian and broader Nordic e-commerce, marketplaces/platforms and omnichannel retailers who want native Vipps/Swish + cards through a single Finanstilsynet-regulated, Norwegian-owned counter-party, and EEA buyers who prioritise a clean non-US ownership chain over published-DPA self-service. Procurement teams that require a public DPA, named sub-processors and disclosed hosting region should request these in writing before onboarding.

SUB-PROCESSORS

Carte des sous-traitants · non divulgué

L'éditeur ne publie pas de liste de sous-traitants. La conformité Schrems II et l'exposition au CLOUD Act ne peuvent pas être vérifiées indépendamment sans elle.
CERTIFICATIONS

Référentiels & certifications · aucune répertoriée

Nous avons vérifié le site de l'éditeur et les registres des organismes de certification. Aucune certification active trouvée à la date du dernier audit (2026-06-12).
FEATURES

Matrice de fonctionnalités

Paiement par carte Oui
Prélèvement SEPA Non
Paiement fractionné (BNPL) Oui
Open banking (A2A) Non
Récurrent / abonnements Oui
Liens de paiement Oui
En personne / TPE Oui
Marketplace / split Oui
INTéGRATION & ACCèS
REST API Yes
SSO (SAML / OIDC) No
CONFORMITé & GOUVERNANCE
Audit log Yes
Self-host / on-prem option No
PUBLIC DOCUMENTS

Documents publics

L'éditeur ne publie pas de DPA public. Sans contrat de sous-traitance accessible publiquement, les petits clients européens ne peuvent pas signer eux-mêmes l'accord — cela est consigné comme absence de DPA publique (voir Notre méthode).
L'éditeur ne publie pas de liste de sous-traitants. La conformité Schrems II et l'exposition au CLOUD Act ne peuvent pas être vérifiées indépendamment sans elle.
  • Contrat de sous-traitance (DPA)
    — manquant
    manquant
  • Liste des sous-traitants
    — manquant
    manquant
  • Conditions d'utilisation
    www.dintero.com/terms…
    Ouvrir ↗
ALTERNATIVES

Alternatives dans cette catégorie

Adyen
Netherlands · Fondé en 2006
BASé UE

Dutch publicly-listed payments giant (Euronext Amsterdam), DNB-licensed credit institution + EU/UK/US banking licences; €1.4T processed/yr.

DPA public Sous-traitants Open source
FROM
CLOUD ACT
MINOR
Alma
France · Fondé en 2019
HéBERGé UE

Paris-area French BNPL for merchants — 2/3/4/10/12 installments + Pay Later; 21,800+ merchants across 8 EU countries; Alma SAS, EU-owned.

DPA public Sous-traitants Open source
FROM
CLOUD ACT
MATERIAL
GoCardless
United Kingdom · Fondé en 2011
HéBERGé UE

London-based UK direct-debit and recurring-payments specialist (FCA-authorised); Mollie acquisition announced Dec 2025.

DPA public Sous-traitants Open source
FROM
CLOUD ACT
MATERIAL