Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Scalapay

VERIFIED
Payments · Italy
Founded 2019 · scalapay.com ↗

Milan-based Italian BNPL (Scalapay S.r.l., 2019): 3 interest-free installments, 1,500+ merchants, 9 EU markets; US-VC-funded at $700M Series B.

In short

Scalapay, in the Payments category, offers EU hosting with Italy as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

Scalapay S.r.l. (Milan, Italy; VAT IT 06891080480) is Italian-incorporated BNPL but raised US$155M Series B in September 2021 at a US$700M valuation with significant US-VC participation (Tiger Global, Woodson Capital, Willoughby Capital, Baleen Capital, all US funds); ownership_signal: eu_hq_us_funded, cloud_act_exposure: material (US-VC-weighted cap table); no public DPA or sub-processors list found at audit.

CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Scalapay

Scalapay is a Milan-based Italian BNPL (buy-now-pay-later) solution operated by Scalapay S.r.l. (Via Nervesa 21, 20139 Milano; VAT IT 06891080480; REA MI-2606390), founded in 2019. The core product splits purchases into three equal interest-free monthly installments for online and in-store retail, with a merchant-funded model where consumers pay no fees. The company serves 1,500+ merchants across Italy, France, Germany, Spain, Portugal, Austria, Belgium, the Netherlands, and Finland, covering fashion, electronics, home goods, sports, and travel verticals. Developer API is available at developers.scalapay.com, with integrations for major e-commerce platforms.

For an EU-sovereignty audit Scalapay is Italian-incorporated (a genuine Italian S.r.l. with Milan registration) but the cap table is heavily US-weighted. The company raised $48M in January 2021 (Series A led by Fasanara Capital, UK) and then $155M in September 2021 at a $700M post-money valuation in a Series B round that included Tiger Global Management (New York), Woodson Capital (US), Willoughby Capital (US), and Baleen Capital (US) as US-VC participants alongside European backers. Tiger Global's participation at lead or co-lead in the Series B places Scalapay firmly in the eu_hq_us_funded tier under the directory's ownership taxonomy. No public DPA, sub-processors list, or explicit EU data-residency commitment was found on accessible public pages at audit.

Pricing for merchants is commission-based per transaction (no monthly fee); consumer installment split is interest-free. Best fit: Italian and Southern European online retailers wanting a local-brand BNPL option with Italian-language support and a familiar domestic brand to consumers in Italy and adjacent markets.

SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-21).
FEATURES

Capability matrix

Card payments No
SEPA Direct Debit No
Buy now, pay later Yes
Open banking (A2A) No
Recurring / subscriptions No
In-person / POS Yes
Marketplace / split No
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement. This is recorded as no public DPA (see How we assess).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    www.scalapay.com/en…
    Open ↗
ALTERNATIVES

Alternatives in this category

Adyen
Netherlands · Founded 2006
EU-BASED

Dutch publicly-listed payments giant (Euronext Amsterdam), DNB-licensed credit institution + EU/UK/US banking licences; €1.4T processed/yr.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MINOR
Alma
France · Founded 2019
EU-HOSTED

Paris-area French BNPL for merchants: 2/3/4/10/12 installments + Pay Later; 21,800+ merchants across 8 EU countries; Alma SAS, EU-owned.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL
Dintero
Norway · Founded 2017
EU-BASED

Oslo fintech (Dintero AS): Finanstilsynet-authorised PI and, since 2025, the only Norwegian-owned direct Visa/Mastercard acquirer; checkout for e-com, marketplaces and physical retail.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MINOR