PCI-PAL PLC (AIM: PCIP) — Investment Research Note

Executive summary

PCI-Pal is a global cloud SaaS provider of secure payment solutions embedded in contact-centre and business-communications environments, resold through 70%+ of the world's CCaaS platforms (Genesys, NICE, Zoom, RingCentral, Talkdesk, Five9, 8x8, Amazon Connect). Across the period covered, revenue has more than tripled from £7.4m (FY21) to £24.6m (FY26E) with the group crossing into adjusted profitability in FY25 (£0.81m adj. PBT) before deliberately reinvesting to sustain 18–20% organic ARR growth into FY27+. The single most important point for valuation today is that ARR (£24.4m, +27% organic in FY26) has now overtaken market cap (£44.9m), providing an unusually low EV/ARR multiple for a 96% gross-retention SaaS business that is beginning to demonstrate operating leverage.

Fair value estimate

Range: 70p – 105p per share (implied market cap £51m – £76m).

Methodology — EV/ARR triangulation cross-checked with EV/Sales and Rule-of-40:

• FY26E ARR £24.4m; CARR £27.5m; revenue £24.6m; net cash £4.0m
• Applied 2.0x–3.0x ARR (typical range for AIM SaaS growing ARR mid-20s% with 96% GRR, sub-scale)
• Low: 2.0x ARR = £48.8m EV + £4m cash = £52.8m → 73p
• Mid: 2.5x ARR = £61m EV + £4m cash = £65m → ~90p
• High: 3.0x ARR = £73.2m EV + £4m cash = £77.2m → ~107p

Sense-check: EV/EBITDA is currently ~37x on depressed £1.1m EBITDA (reinvestment cycle). If FY27 EBITDA normalises toward £3m+ as investment tapers (management targets margin expansion "over medium term"), an EV/EBITDA of 20x supports ~£60m EV → ~88p.

Midpoint ~£63m implies ~40% upside vs £44.9m current cap; downside case (2.0x ARR) still +18%.

Sector context

Correctly classified Technology / Software. PCIP is a vertical SaaS with a payment-security niche embedded in the CCaaS ecosystem. Its 90% gross margin, 96% GRR, and 27% ARR growth are top-quartile SaaS metrics, but revenue scale (£24m) is significantly below typical listed SaaS peers. Balance sheet (net cash, debt-free) is above sector norm. Comparable listed peers: Cerillion (CER.L) — larger, more profitable vertical SaaS; GB Group (GBG.L) — identity/fraud SaaS at greater scale; and international peer Sycurio Ltd (private, direct competitor). PCIP's cloud-native, partner-first model is a genuine differentiator vs private competitors selling legacy on-prem.

Investment thesis

• AI-driven interaction volumes create an incremental TAM for payment orchestration. Management notes conversational AI vendors "recognise the value of partnering with an independent payment and compliance platform" and secured the largest conversational-AI secure-payment contract in Q1 FY26 2026-07 trading update. MCP support in development aims to make PCI-Pal discoverable by AI agents 2026-03 interim results.
• High operating leverage from an 87–90% gross-margin SaaS at inflection. ARR grew 27% organic in FY26 while revenue grew only 9% (14% comparable) because the group deliberately deferred profits to fund partner ecosystem and US marketing; the payoff should be visible in FY27 EBITDA 2026-07 trading update; 2025-09 final results.
• Valuation discipline: EV < ARR at 1.7x with a debt-free balance sheet. Peer AIM SaaS with 20%+ ARR growth and 95%+ GRR typically trade 2.5–4x ARR. The market is not paying for the growth trajectory or partner moat 2025-09 final results; 2026-07 trading update.

Key risks

• AI substitution rather than augmentation. If conversational-AI vendors natively embed their own PCI-compliant payment orchestration, PCIP's role as the neutral bridge is displaced. Management explicitly notes "current volume of payments processed via bots remains low" — the AI upside is more thesis than P&L reality 2026-03 interim results.
• Sub-scale operations with recurring reinvestment cycles. Group has toggled twice from adjusted profit to loss (FY22→FY23; FY25→FY26) as management prioritises growth. Absolute profits still small (£1.1m EBITDA on £24.6m revenue); any sales shortfall would push back the profitability inflection 2026-07 trading update; 2025-09 final results.
• Customer concentration and disclosure quality. Single customer accounts for 17% of revenue (FY26 H1) — likely the UK DWP contract. Historical FY24 revenue deferral (£0.7m pulled from FY24 into FY25 during audit) is a reminder that revenue-recognition judgement can move numbers 2024-08 trading update; 2026-03 interim results.

Operating leverage

Operating leverage is genuinely strong but currently being consumed by growth investment. The cost base is ~77% personnel, ~5% AWS platform, and the platform itself is highly scalable (platform costs of £1.05m serve £22.5m of revenue and would scale sub-linearly). Gross margin has expanded from 75% (FY21) to 90% (FY25) — 100% of incremental revenue drops to gross profit. Fixed R&D and central costs mean that if FY27 revenue growth accelerated 10–20% above plan (say to £30–32m vs likely ~£28m plan), incremental gross profit of £3–4m would fall largely to operating profit given only modest additional headcount would be needed — plausibly doubling EBITDA to £2.5–3.5m. The inflection point management is engineering is a self-serve deployment model within 18 months, which would materially lower cost-to-serve on the SMB segment 2026-03 interim results; 2025-09 CFO review.

Value-trap signals

None identified. Growth is accelerating, retention is top-quartile, balance sheet is net cash, no dividend was ever paid or cut, and the historical patent litigation (Sycurio) was resolved comprehensively in PCI-Pal's favour in September 2023.

Earnings vs. expectations

Where explicit consensus is disclosed: FY26 revenue £24.6m vs consensus £23.7m (beat); adj. EBITDA £1.1m vs consensus £0.85m (beat) 2026-07 trading update. FY25 delivered in line with market expectations at £22.5m revenue and £0.8m adj. PBT 2025-09 final results. FY24 was a notable miss vs the pre-audit expectation — a £0.7m revenue item was deferred into FY25 following audit review, causing the group to warn on 28 August 2024 2024-08 trading update. Pattern: more beats than misses, with one significant deferral-driven miss in FY24 relating to revenue-recognition judgement, not underlying demand.

Conviction

3 — Moderate. Anchors: (i) clean recurring-revenue SaaS metrics that are easy to model (ARR, CARR, GRR, NRR all disclosed and consistent); (ii) simple capital structure (net cash, no derivatives, minimal debt); (iii) multi-year track record of hitting or beating expectations. Limits: (i) small-cap AIM SaaS multiples vary widely (2–4x ARR is a wide band) — a re-rating is not assured; (ii) the AI-beneficiary narrative is more prospective than realised, so any DCF-style upside case depends on assumptions that are not yet visible in the P&L.