Security here is not a page bolted on at the end — it is how the money layer is built. Isolation, idempotency, and a tamper-evident audit, enforced below the handler.
Row-level security on every query. One tenant can never read another, enforced below the handler where it cannot be forgotten.
Card data never touches our code. It is tokenized by the gateway SDK; we never store or log a PAN or CVV.
Every mutation carries a key. Retries, webhook replays, and double clicks collapse to a single effect — no double charges.
A hash-chained log of every state change. Alter one row and the chain breaks visibly, so the record can be proven.
A hard sandbox boundary that batch jobs respect too, so test data can never bill a real customer.
A double-entry ledger in minor units. Debits equal credits on every write; no floating-point money, ever.
Role-based access control on every route, and scoped API keys that only reach what they are granted.
HTTPS everywhere, HSTS, and strict security headers set at the edge before any request reaches the app.
Export and erasure for data-subject requests, each one audited, so privacy obligations are met on the record.
Found a vulnerability? Report it privately and we will respond within two business days, keep you updated, and credit you if you wish. Please do not disclose publicly until we have fixed it.
[email protected]We are in private beta. Formal attestations are on the roadmap; we will publish them here as they are completed rather than claim them before they exist.
Email us if you find a security vulnerability, or if you believe personal data or credentials have been exposed. We acknowledge every report within two business days. If a personal data breach affects data we process for you, we notify you without undue delay after we become aware of it, as set out in our Data Processing Addendum.
[email protected]We will not pursue legal action against good-faith research that reports the issue to us first, accesses only the data needed to show the problem, does not degrade the service for others, and gives us reasonable time to fix it before any public disclosure.