Ingenico

France · ingenico.com · 21 vendors

Ingenico is a global leader in payment acceptance solutions, providing point-of-sale (POS) terminals, payment software, and services. The company enables businesses to securely accept various payment methods across all sales channels, including in-store, online, and mobile, serving financial institutions, retail chains, and small merchants.

Resilience scores

Technology vendors

Services catalogue

3 services in catalogue across 2 categories; runs on 21 sub-vendors.

Insights

Last updated 2026-08-11 · revision 2

21 direct vendors, 285 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Ingenico shows good migration readiness due to its existing 'Cloud-based microservices architecture' and extensive use of 'REST APIs', providing a strong foundation for further cloud adoption. The development of 'Android-based POS' and 'SoftPOS' solutions demonstrates a commitment to modern, flexible, and potentially cloud-native payment acceptance methods. The 'Ingenico 360 Cloud Platform' and 'Ingenico Device Management' indicate existing expertise and infrastructure for managing cloud-connected devices and services, which can be leveraged for migration. The 'Payment APIs & SDKs (Developer Program)' also suggests an open and extensible platform, facilitating integration during migration. However, challenges exist with the presence of embedded Linux and C/C++ for its TETRA terminals, which might require re-platforming for a fully cloud-native architecture. The 'Vendor Lock-in Risk' being unknown is a concern; if there are significant dependencies on specific vendors for the 26 services identified, this could complicate migration efforts. The absence of specific data residency requirements, detailed regulatory environment information, and financial stability data (revenue concentration, growth history) makes it difficult to fully assess potential compliance hurdles and the company's capacity to fund a large-scale migration.

Compliance

13 in-scope frameworks identified; showing 3.

DORA (source) — Assessment Required

DORA risk is High for Ingenico because: (1) DORA applies to ICT third-party service providers (TTPs) that provide critical or important services to financial entities in the EU — Ingenico's cloud platform (Ingenico 360), device management, and payment services qualify; (2) Ingenico may be designated as a Critical ICT Third-Party Provider (CTPP) by EU supervisory authorities given its systemic importance to EU payment infrastructure; (3) DORA became applicable from January 17, 2025, requiring immediate compliance; (4) as a CTPP, Ingenico would be subject to direct oversight by EU Lead Overseers (EBA, ESMA, EIOPA); (5) non-compliance penalties can reach €5M for individuals and 1% of average daily worldwide turnover for entities. Risk is High due to systemic importance and direct regulatory oversight potential.

Evidence: https://ingenico.com/us-en/ingenico-360, https://ingenico.com/us-en/products-services/services/ingenico-device-management, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2554, https://www.eba.europa.eu/regulation-and-policy/digital-operational-resilience-dora

ISAE 3000 (source) — Assessment Required

ISAE 3000 risk is Low for Ingenico because: (1) ISAE 3000 is primarily relevant for companies providing assurance services or subject to third-party assurance reporting (e.g., CSR/ESG reporting, controls assurance); (2) Ingenico is a payment technology company, not an assurance services provider; (3) however, ISAE 3000 may be relevant if Ingenico's auditors issue assurance reports on its internal controls or ESG disclosures; (4) the risk is Low as non-compliance with ISAE 3000 does not carry direct regulatory penalties for Ingenico.

Evidence: https://ingenico.com/us-en/about, https://www.iaasb.org/publications/international-standard-assurance-engagements-isae-3000-revised-assurance-engagements-other-audits-or

NIS2 (source) — Assessment Required

NIS2 risk is High for Ingenico because: (1) Ingenico operates in the financial/payment infrastructure sector, which falls under 'Essential Entities' (banking and financial market infrastructure) under NIS2 Annex I; (2) Ingenico also qualifies as a digital infrastructure/ICT service management provider through its cloud-based Ingenico 360 platform and device management services; (3) Ingenico far exceeds the size thresholds (50+ employees, €10M+ turnover) as a global company with thousands of employees and billions in revenue; (4) NIS2 was transposed into French law (Loi de programmation militaire / ANSSI framework) with enforcement active from October 2024; (5) non-compliance penalties can reach €10M or 2% of global turnover for Essential Entities; (6) ANSSI (French cybersecurity agency) is an active enforcement body. Status is 'Assessment Required' because Ingenico has not publicly disclosed its NIS2 registration or compliance status.

Evidence: https://ingenico.com/us-en/products-services/services/security-solutions, https://ingenico.com/us-en/ingenico-360, https://www.anssi.fr/en/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555

Financials

Three-year financials

Financial Resilience Score: 5/10

Ingenico is a private company owned by Apollo Global Management since October 2022, following its carve-out from Worldline at an enterprise value of approximately €2.3 billion. As a private, sponsor-owned entity, it has limited public financial disclosure, and post-2022 audited consolidated figures are not publicly available. Rating agencies (Moody's and S&P) have rated its LBO debt in the B / single-B range, indicating speculative-grade credit quality with a leveraged capital structure. On the positive side, Ingenico enjoys market leadership as the #1 global player in POS payment terminals, with tens of millions of terminals deployed across 120+ countries and more than 1,000 bank/acquirer customers. Its large installed base supports a growing recurring services revenue stream via device management, security services and its Ingenico 360 / PPaaS cloud platform. Geographic diversification across EMEA, North America, LATAM and APAC reduces regional concentration risk, and Apollo sponsor backing provides capital for bolt-on M&A (e.g., phos SoftPOS in 2023). However, the company faces significant headwinds: hardware sales are cyclical and tied to bank/merchant refresh cycles, with sector-wide slowdowns in 2023-2024 affecting peers like Verifone and PAX. Competitive pressure from PAX Global, Verifone, SoftPOS solutions and integrated payment providers (Square, SumUp, Adyen) is intensifying. Higher interest rates since 2022 raise debt-service costs on the LBO financing, and supply chain / component exposure remains a sector risk.

Key strengths: Market leadership as #1 global player in POS payment terminals, Large installed base supporting recurring services revenue, Geographic diversification across 120+ countries, Long track record with PCI certification and EMV compliance, Apollo sponsor backing providing capital for M&A, Historical operating margin (EBITDA) in high teens to ~20% during listed era

Risk factors: Leveraged capital structure from 2022 Apollo LBO, rated B / single-B (speculative grade), Higher interest rates increasing debt-service costs, Cyclicality of hardware terminal sales tied to refresh cycles, Competition from PAX Global, Verifone, and SoftPOS / integrated payment providers (Square, SumUp, Adyen), Component and supply chain exposure, Limited public financial transparency as private sponsor-owned entity

Revenue by geography

Revenue by product/service

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report