Certification

AFD certification is audited by SAMA against the script. The compliance checklist:

1. The integration must not freeze or hang between the POS terminal and the integrated solution.
2. The connection between them must be secure and must not be exposed to public networks.
3. The solution must follow the AFD business rules of the user experience.
4. Each POS terminal integrated to one pump/nozzle only.
5. The terminal must receive the amount correctly from the integrated system.
6. Both contact and contactless must be accepted.
7. The terminal must return correct results to the integrated system.
8. Branding must meet the mada AFD brand guideline.

Prerequisites before the audit: a mada-certified POS terminal, a certified SAMA AFD Framework integration, and a completed POS-to-pump integration.

The journey is submitted before the audit is scheduled

You do not book an audit and then show SAMA the product. The full user journey has to be
submitted first, covering all three tracks end to end:

• Full tank
• Preset amount
• Other amount

SAMA reviews the submission, and only once it is confirmed is an audit date set. A journey
that has not been agreed on paper cannot be tested, so this step sits on the critical path —
treat it as a deliverable with a lead time, not a formality after the build.

The audit happens on a forecourt

SAMA attends in person, at a real petrol station, and works through every scenario on a live
pump. Not a bench, not a simulator, not a recording.

That has consequences for how you build. Every row of the capture and void matrices in
section 7 has to be reproducible on demand, in front of an auditor — including the fault
rows. If a scenario can only be triggered by waiting for a real pump to jam, you need a way to
produce it deliberately, and you need that before the visit rather than on the day.

← What your application must survive  ·  Contents  ·  Checklist →