- If your procurement requires published, independently verifiable security certifications
- paymove does not publish SOC 2/ISO 27001 documentation in accessible public materials; organizations requiring those artifacts may prefer vendors that can provide them immediately.
- If your main user base strongly distrusts QR code payments (high scam prevalence)
- Public concern about QR sticker substitution and phishing is a material risk. If mitigation (for example, active inspections, tamper-evident signage, public education) is impractical, an app-based or card-based approach may be preferable.
- If you need 24/7 contractual support with strict SLAs
- The vendor's publicly described support model is oriented around business hours with limited weekend coverage; confirm contractual SLAs if 24/7 support is required.
- If you require a mature, globally recognized consumer parking app ecosystem
- Well-known consumer parking apps may provide stronger cross-city reuse and established user familiarity that matter more than a no-app flow in some markets.
- If you require extensive, pre-built enforcement tooling and integrations out-of-the-box
- paymove mentions a controller app and real-time session checks, but publicly available detail on enforcement workflows and integrations is limited compared with mature parking platforms.
- Current limitations acknowledged by the vendor (explicit or implied)
- Pricing transparency is limited on public pages; vendor materials indicate fees are often negotiated or presented on a per-customer basis.
- Support coverage appears oriented to business hours in public communications.
- The web-app payer flow depends on mobile data connectivity; the vendor markets a lightweight web app but an internet connection is necessary.
- Roadmap signals
- Press materials mention the vendor’s plans to expand payment infrastructure capabilities and to support automated payment interactions; buyers should request specific product roadmaps and timelines.
- Scale limitations
- No public documentation of hard service limits (for example, transactions/day or concurrency thresholds) was located; buyers should request scalability and performance documentation for large deployments.
- Security or compliance gaps
- No public SOC 2 or ISO 27001 documentation was located; the vendor’s PCI DSS statements lack published attestation scope. QR fraud risk remains intrinsic to the channel; physical signage mitigations reduce some threats but do not eliminate social-engineering risks.
- API limitations or integration constraints
- The vendor indicates API-key-based integration is available but does not publish public API documentation including endpoints, rate limits, or Webhook specifications; buyers should request integration documentation and a developer sandbox during technical evaluation.