Security & Compliance

Payment infrastructure is only as good as the controls around it. Here's what's built in today.

• PCI DSS scope reduction via hosted fields and tokenization — raw card numbers never touch your servers when using the SDK
• Encrypted credential storage (AES-256-GCM at rest)
• Role-based access control and audit trails across the dashboard
• Two-factor authentication on every account