TESS Payments secured a QCB PSP licence in Qatar by deploying a white-label payment platform rather than building proprietary technology from scratch, a process that Akurateco’s co-founder and CEO Volodymyr Kuiantsev says compressed a potential decade-long build into a commercially viable timeline.
Why Proprietary Builds Fail the Regulatory Clock
The Qatar Central Bank (QCB) requires all payment service providers (PSPs) to process and store payment data entirely within Qatar. No offshore cloud workarounds qualify. Any PSP that wants to operate legally must have its infrastructure physically inside the country before it can apply for a licence.
Under the QCB’s Payment Services Regulations, according to Al Tamimi & Company, covered services include e-money issuance, merchant acquiring, local fund transfers, payment portals, and ATM ownership. Applicants must satisfy requirements across corporate governance, capital thresholds, surety bonds, risk management, and anti-money-laundering frameworks. Foreign PSPs without a local office but serving Qatari customers face the same obligations, according to PayAtlas.
A full proprietary payment stack, covering a gateway, routing engine, merchant management, tokenisation, fraud prevention, and analytics, takes two to three years to build under favourable conditions. Add certification, acquiring partnerships, and the licence application itself, and a PSP starting from scratch today faces the better part of a decade before operating at meaningful scale.
TESS Payments, operating since 2016 and serving Qatar National Bank, Doha Bank, and Qatar Development Bank, chose a different path. The company selected a white-label platform from Akurateco that came pre-integrated with the connectors Qatar demands: NAPS (the national ATM and point-of-sale network), Doha Bank, and Mastercard Payment Gateway Services (MPGS). That pre-integration alone removed months of development work before the compliance process even began.
The Road to a QCB PSP Licence
TESS launched initially on a cloud-based software-as-a-service (SaaS) platform, a model where the vendor hosts and manages the infrastructure. The purpose was deliberate: running live transactions on SaaS allowed TESS to build the compliance history and demonstrated operational capacity that QCB auditors require before approving a PSP licence application.
Akurateco’s team supported the QCB application directly, drawing on prior regional deployments to anticipate documentation requirements. TESS obtained its QCB PSP licence and subsequently achieved PCI DSS certification (the global card-data security standard). Both credentials are prerequisites for institutional clients and enterprise merchants in Qatar.
The QCB’s data regime adds a further compliance layer. Its Data Handling and Protection Regulation requires regulated institutions to conduct Data Protection Impact Assessments (DPIAs) for high-risk processing and to appoint a Data Protection Officer to oversee compliance, according to Securiti. Customers also hold a right to deletion of personal data, subject to regulatory and contractual constraints.
Migration: Putting Infrastructure Inside Qatar
With the licence in place, TESS migrated from SaaS to dedicated on-premises infrastructure hosted on Microsoft Azure’s Qatar Central region, physically located in Doha. That Azure region opened in 2022, according to DgtlInfra, giving PSPs a credible in-country cloud option that satisfies QCB’s localisation requirements.
Akurateco’s engineering team ran SaaS and on-premises systems in parallel during the switchover, synchronising transaction data across both environments to ensure zero merchant downtime. The result is a gateway deployed fully within Qatar and operating under TESS’s direct control, meeting both QCB data residency rules and the infrastructure ownership expectations of national bank clients.
What This Means for MENA Expansion
Qatar’s regulatory framework is not an outlier. Saudi Arabia’s SAMA, the Central Bank of the UAE, and Egypt’s Financial Regulatory Authority all impose data residency and licensing requirements of their own. Any PSP pursuing MENA expansion will encounter the same structural tension between regulatory compliance and commercial speed.
The market context makes timing urgent. In March 2023, the QCB launched its National Fintech Strategy, positioning itself as both regulator and enabler of digital payments innovation, according to the U.S. International Trade Administration. The same report notes that almost 90 percent of small and medium enterprises in Qatar already accept debit and credit cards, and the QCB introduced a unified mobile payments system as early as 2020. The infrastructure for digital commerce is in place; the competition for merchant relationships is intensifying.
The SaaS-to-on-premises approach TESS used is replicable. Launch on a managed cloud platform, build the compliance record, obtain the QCB PSP licence, then migrate to in-country infrastructure. The PSP generates revenue throughout rather than sitting idle during a multi-year build. That commercial argument is as persuasive as the regulatory one for any operator weighing how to enter the Gulf.
