05 / Security

TRUST IS
PART OF THE SYSTEM.

Learn about connection security, credential handling and payment integration controls.

Security

Eight controls on every connection

Security is part of payment integration, not an add-on. Connection controls and responsibilities are agreed with each institution for UAT and production. Read our Compliance page for service scope and applicable due diligence.

Mutual TLS 1.3

Both sides present certificates. Only public certificates and CA chains are ever exchanged.

IP allowlisting

Ingress and egress are fixed to agreed addresses in CIDR format, per environment.

JWT authentication

Short-lived, scoped authentication credentials through OAuth 2.0 or signed requests.

Idempotency protection

Duplicate requests are detected and answered with the original result.

Unique references

Every transaction carries a unique sender reference, preserved end to end.

Immutable audit log

Append-only records of every instruction, state change and operator action.

HSM key storage

Signing and encryption keys are generated and held in hardware security modules.

Secure credential delivery

Secrets never travel by email. They move only through a verified secure channel.

Information & resources

Your next connection.
Start with the right information.

Explore our service scope and technical information, or contact us to discuss your fiat payment integration.

Documentation enquiries

Public downloads are temporarily unavailable while documentation is updated. Contact us for current service information and applicable due diligence requirements.

Request information
The next connection starts here

LET'S BUILD
WHAT'S NEXT.

Bring your institution, your ambition
and your next challenge.

Start a conversation