Compliance frameworks, security audits, and quality certifications this company maintains.
Regulatory
Swedish Banking License
CertifiedKlarna holds a full banking license granted by the Swedish Financial Supervisory Authority (Finansinspektionen), enabling it to accept deposits, issue credit, and operate as a regulated digital bank across Sweden and the EU under the passporting framework.
Klarna is PCI DSS Level 1 certified — the highest level — demonstrating that its payment processing infrastructure meets the most rigorous standards for protecting cardholder data across its 966,000 merchant integrations and 118 million consumer transactions.
Klarna complies with GDPR across all EU markets, with consumer data stored in European data centers, transparent data processing notices, and a dedicated privacy team overseeing consumer data rights including access, deletion, and portability requests.
Klarna maintains ISO 27001 certification across its technology and payments infrastructure, providing merchant partners and regulators assurance that Klarna's information security management meets international standards for protecting financial data.
Klarna's merchant platform and consumer data infrastructure hold SOC 2 Type II certification, independently verifying that controls over data security, availability, and confidentiality in Klarna's payment processing systems are operating effectively.
Regulatory
EU Consumer Credit Directive
CompliantKlarna complies with the EU Consumer Credit Directive across all European markets, including pre-contractual disclosure requirements, affordability assessments, and right-of-withdrawal provisions for all credit products offered through its BNPL platform.
Regulatory
FCA Authorisation (UK)
CertifiedKlarna is authorized by the UK Financial Conduct Authority to conduct consumer credit activities in the United Kingdom, including BNPL products, subject to FCA rules on creditworthiness assessments and consumer duty obligations.
Klarna complies with the California Consumer Privacy Act for its U.S. consumer base, providing California residents with rights to know, delete, and opt out of the sale of personal information processed through the Klarna App and payment platform.
Regulatory
Open Banking (PSD2)
CompliantKlarna is compliant with PSD2 Open Banking requirements across the EU, enabling secure account information access and payment initiation services through standardized APIs that power Klarna's bank account linking and pay-by-bank features.
Klarna is certified to ISO 27018, ensuring that personally identifiable information of its 150+ million consumers processed through its buy-now-pay-later and banking services is handled according to internationally recognized cloud privacy protection standards.