PayPo

Poland · www.paypo.pl · 14 vendors

PayPo is a Polish financial technology company that operates a Buy Now, Pay Later (BNPL) platform. It allows online shoppers to defer payments for their purchases for up to 30 days without additional costs or to split payments into installments. The platform provides flexible payment solutions for consumers and aims to increase conversion rates for online retailers.

Resilience scores

Disruption prediction

PayPo has an estimated 17% probability of disruption in the next 6 months.

8 of PayPo's 14 vendors monitored for disruptions.

Technology vendors

Insights

Last updated 2026-07-30 · revision 2

14 direct vendors, 197 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

PayPo exhibits very high migration readiness, largely due to its highly modern, cloud-native, and containerized internal tech stack. The use of Amazon Web Services (AWS), Kubernetes, Docker, and microservices-enabling technologies like Kafka, Redis, and Elasticsearch, combined with strong DevOps practices (Terraform, GitLab CI/CD), positions PayPo exceptionally well for any potential migrations or architectural shifts. This infrastructure allows for high portability, automation, and flexibility. The company's key technologies, including a REST API and an e-commerce plugin ecosystem, further support integration and modularity. While operating in a regulated financial services industry (implied by 'Open Banking / PSD2') can introduce compliance complexities, PayPo's advanced tech stack is well-suited to manage these requirements efficiently. The lack of specified data residency requirements is an unknown that could pose challenges if strict regulations apply. Similarly, the absence of financial stability data makes it difficult to assess the company's capacity to fund a large-scale migration. However, the vendor landscape, with diverse geographic HQs and a lack of explicit 'Total Vendors' (which could imply no major strategic vendor lock-in), suggests a relatively unencumbered environment for migration. The overall technological foundation is a significant enabler for agile and efficient migration initiatives.

Compliance

11 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

PayPo operates in the financial services sector — specifically as a BNPL (Buy Now Pay Later) payment institution. Under NIS2 (Directive (EU) 2022/2555), 'banking' and 'financial market infrastructures' are classified as Essential Entities (Annex I). Payment service providers and credit institutions fall within the financial sector scope. Poland transposed NIS2 into national law via the Act on the National Cybersecurity System (KSC — Krajowy System Cyberbezpieczeństwa), with updates required by the October 2024 NIS2 deadline. Risk is High because: (1) financial sector entities are Essential Entities under NIS2 with the most stringent obligations; (2) PayPo's digital-first BNPL model means its entire business depends on network and information systems; (3) cybersecurity incidents could directly impact consumer financial transactions; (4) Poland's CSIRT KNF (the financial sector CSIRT) actively monitors financial sector cybersecurity; (5) penalties for Essential Entities can reach €10M or 2% of global annual turnover.

Evidence: https://www.paypo.pl, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555, https://www.gov.pl/web/cyfryzacja/krajowy-system-cyberbezpieczenstwa, https://www.knf.gov.pl

ISAE 3000 (source) — Assessment Required

ISAE 3000 is an assurance standard used by auditors to provide assurance on non-financial information, including sustainability reports, internal controls, and compliance statements. For PayPo, ISAE 3000 is not directly mandated but could be relevant if PayPo issues assurance reports to merchant partners or investors regarding its controls environment. Risk is Low because: (1) ISAE 3000 is not a regulatory requirement for Polish payment institutions; (2) it is primarily relevant if PayPo voluntarily seeks third-party assurance on its controls; (3) the absence of ISAE 3000 reports does not constitute non-compliance with any applicable law.

Evidence: https://www.iaasb.org/publications/international-standard-assurance-engagements-isae-3000-revised-assurance-engagements-other-audits

Consumer Credit Directive 2 — Assessment Required

The revised Consumer Credit Directive (Directive 2023/2225/EU — CCD2) specifically extends consumer credit regulation to BNPL products, which is PayPo's core business model. Risk is High because: (1) CCD2 explicitly covers deferred payment products like BNPL that were previously exempt; (2) it introduces mandatory creditworthiness assessments for BNPL; (3) it requires standardized pre-contractual information (SECCI); (4) it mandates cooling-off periods and withdrawal rights; (5) Poland must transpose CCD2 by November 2025, with application from November 2026; (6) non-compliance could fundamentally affect PayPo's business model and require significant product redesign.

Evidence: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32023L2225, https://www.paypo.pl, https://www.knf.gov.pl

Financials

Three-year financials

Financial Resilience Score: 7/10

PayPo's financial resilience improved materially in September 2023 following its acquisition by Klarna Bank AB, which provides access to group-level funding, liquidity, risk models, and technology, as well as a publicly listed parent (Klarna IPO'd on NYSE in 2025). Prior to this acquisition, PayPo operated as a scaling BNPL fintech with strong top-line growth (well above 50% YoY in most years) but persistent operating losses typical of the BNPL model, where funding costs and credit-risk provisioning outrun fee income during expansion phases. The company had received multiple equity injections from investors including MCI Capital, Finch Capital, and Kreditech, indicating investor confidence but also a reliance on external capital. As the leading Polish BNPL brand with first-mover advantage, PayPo benefits from strong brand recognition ('PayPo' is a near-generic term for BNPL in Poland) and integrations into thousands of Polish e-commerce merchants. However, resilience is offset by regulatory pressures, notably the amended Polish Anti-Usury Law (2022-2023) which capped non-interest costs on consumer credit and squeezed BNPL unit economics. Interest rate sensitivity (WIBOR increases in 2022-2023 raised cost of funds) and credit risk in a slowing consumer environment remain material concerns. Overall, backing by Klarna provides a solid capital foundation, but standalone profitability remains unproven.

Key strengths: Acquisition by Klarna Bank AB (Sept 2023) provides group-level funding and liquidity backing, Market leadership in Polish BNPL segment with strong brand recognition, Integrations with thousands of Polish e-commerce merchants, Multiple prior equity injections from MCI Capital, Finch Capital, and Kreditech, Regulated and supervised entity cooperating with UOKiK and reporting to BIK, Strong revenue growth trajectory (>50% YoY in most years)

Risk factors: Historically loss-making on standalone basis, Polish Anti-Usury Law caps on non-interest consumer credit costs squeezing unit economics, Interest rate sensitivity with rising WIBOR increasing cost of funds, Credit risk exposure in a slowing consumer environment, Integration/brand consolidation risk as Klarna may migrate customers to Klarna brand, Reliance on external capital for growth funding

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report