Website compliance monitoring for high-risk merchants

Stay as compliant as the day you were approved.

Your processor and your bank approved the website you had at underwriting. Every product, page and claim you add after that can put those accounts at risk. Merivo watches your site continuously and tells you exactly what to fix, while there's still time to fix it.

A WordPress and WooCommerce plugin. Usually provided through your processor or bank.

yourstore.com/products/calm-tincture
Calm Tincture, 1000mg $64.00 · 30 ml

Full-spectrum hemp extract with MCT oil. Customers say it helps treat anxiety and supports a restful night. Ships to all 50 states in discreet packaging.

Fix Disease claim and shipping scope Products can't be described as treating a medical condition. Shipping must match your approved states. Due Oct 20 · found before your next account review
What's at stake

In a high-risk industry, your website is part of your account.

Processors, card networks and banks review what your site says, not only what you told them at onboarding. When the site and the approval stop matching, they act, often without much warning.

Your processor

Holds, reserves and termination

Card networks run programs that fine processors for prohibited content on merchant sites. Processors pass that risk on to you.

  • Funds held or a higher rolling reserve
  • Processing paused during review
  • Account closed for a rules violation
Your future accounts

The MATCH list follows you

A merchant terminated for cause can be added to Mastercard's MATCH list, which other processors check before approving anyone. A listing generally stays for five years.

  • New processors decline or price you higher
  • Applies to the business and its principals
Your bank

Closures under ongoing due diligence

Banks that serve high-risk businesses review them on a schedule, and many check the website. Claims or products outside what the bank approved can lead to a closure notice.

  • Operating accounts closed on short notice
  • Harder to open a new account elsewhere
Why once isn't enough

Sites drift. Usually nobody means it to.

A compliance review at approval checks one moment in time. A store changes every week. Most violations come from ordinary updates: a new product, a copywriter's line, a theme change that drops a disclaimer.

  1. Day 0Approved by your processor and bankSite matches the application exactly
  2. Day 41New product imported from a supplier feedThe supplier's description includes a health claim
  3. Day 96Theme updateYour "not evaluated by the FDA" footer disappears
  4. Day 150Blog post from a freelance writer"Clinically shown to reduce pain"
  5. Day 203Processor's periodic reviewThree violations found at once. The account goes under review.
How it works

Set it up once. Merivo checks every change after that.

  1. Install and connect

    Install the Merivo plugin and enter the one-time code from your processor or bank. Setup takes a few minutes.

  2. Merivo scans as you work

    Pages, posts and WooCommerce products are checked when you save them, including drafts and scheduled posts. A full scan runs every day.

  3. Get a clear notice

    When something needs to change, you see the page, the exact words, why they're a problem and the date to fix it by.

  4. Fix and mark it done

    Edit the page and mark the item fixed. Merivo re-checks it and records the fix, so there's a dated record you corrected it.

Inside your dashboard

Plain instructions, not a compliance manual.

What to change, in your own words

Each notice quotes the text on your page and explains the rule behind it in a sentence or two.

A deadline you can plan around

You get an email when a notice arrives and a reminder three days before it's due.

Proof you kept your site in line

Every fix is checked and dated. If your processor or bank asks, the record is already there.

ConnectedLast check 12 min ago · 214 pages watched
/products/calm-tinctureDue Oct 20
helps treat anxiety Hemp and CBD products can't claim to treat, cure or prevent a medical condition. Describe ingredients and use instead.
Mark as fixedAdd a note
/aboutFixed Oct 2 · verified
FDA disclaimer restored to the site footer.
Built for high-risk categories

Rules written for the industries processors watch most closely.

Merivo's rule packs are maintained by compliance specialists and updated as card-network and banking expectations change.

Hemp and CBD

Medical claims, THC language, shipping scope and required disclaimers.

"cures", "treats anxiety", "ships nationwide"

Peptides and research chemicals

Human-use language and dosing directions on research-only products.

"recommended dose", "for personal use"

Supplements and nutraceuticals

Disease claims and specific weight-loss promises.

"prevents the flu", "lose 30 lbs"

Kratom and botanicals

Effect claims and consumption language that processors restrict.

"opioid alternative", "pain relief"

Vape and age-restricted

Age verification, flavor and shipping language.

"no ID required", "ships to all states"

Other high-risk merchants

Card-network restricted categories and terms your processor adds for your account.

custom terms from your processor
Transparency

What Merivo looks at, and what it never touches.

Merivo reads

  • The text of your pages, posts and products
  • The address of any page with a flagged phrase, plus a short excerpt around it
  • Your public pages as a visitor sees them
  • Plugin and WordPress version, so your rules stay current

Merivo never collects

  • Customer names, emails or addresses
  • Orders, carts or payment details
  • Your WordPress users or passwords
  • Anything unrelated to your site's content
Questions

Common questions from merchants

Why did my processor or bank ask me to install Merivo?

Processors and banks that serve high-risk industries are expected to monitor their merchants' websites, not just review them once. Merivo lets them do that continuously, and gives you the chance to fix issues directly instead of finding out in a review.

Who sees the findings?

Your processor or bank sees what Merivo finds on your site. You see every item they send you to fix, with the reason and a due date. Merivo doesn't share your information with other merchants or processors.

Will it slow down my website?

No. Scans run in the background on a schedule and when you save content. Nothing runs while a customer loads a page.

What if something is flagged by mistake?

Add a note to the item explaining the context. A reviewer at your processor or bank decides, and false positives are closed with the reason recorded.

What if I deactivate the plugin?

Your processor or bank is notified when Merivo stops reporting. Many require it to stay active as a condition of your account, so check your agreement before removing it.

Does Merivo guarantee my account stays open?

No tool can guarantee that. Account decisions belong to your processor and bank, and depend on more than your website. Merivo helps you keep the website part in order and shows you kept it that way.

Do I pay for Merivo?

Merivo is usually provided by your processor or bank as part of your account. Ask them for an invite code to get started.

My site isn't on WordPress. Can I still use it?

The plugin is for WordPress and WooCommerce today. Support for other platforms through website scanning is planned. Contact us to be notified.

Get started

Keep your accounts in good standing.

Merchants

Have an invite code from your processor or bank? Install the plugin, enter the code, and you're connected.

Download the plugin

Processors, ISOs and banks

License Merivo to monitor your merchant portfolio, with per-site pricing and a full audit trail for examiners.

hello@merivo.tech