Compliance in payments is where three different sets of rules meet: the law of the country where the company is based, the contract with the acquirer, and the card network's rulebook. None of the three has to agree with the other, and the seller answers for all three.

In practice, this becomes a concrete list: what the sales page can promise, what documents the account needs to have, how the product is described on the statement, how long the refund policy needs to last, and what can't be sold under any circumstances.

Compliance isn't bureaucracy running parallel to the business. It's what separates an operation that scales from one that gets shut down without warning.