Slim chance that any Estonian startup will though. No-one is willing to dole out the cash for the legal side of a payments company. There also most likely is a lack of competent CISO-s, as most PII in Estonia is public and not a lot of places need to protect payments data.