Security
Your card data and your money, kept out of our hands.
Trust is our product. Here is what that means in practice, and what we will never do.
Four commitments
- Card data is encrypted inside the reader or the hosted field. We never see a full card number, and neither do you.
- Merchant funds settle through a sponsoring member bank. Money never sits in an account we control.
- One rate per transaction, and no fee that is not on the pricing page.
- Accounts are month to month. Your hardware and your data are yours if you leave.
Why merchants trust us
Security, safety, and terms you can read.
We chose every part of the system so that your card data and your money are never at risk in our hands.
- Security
Card data never touches your systems. Certified terminals encrypt at the tap. Online checkout runs in hosted fields. Cards on file are tokens, not numbers. Your PCI work shrinks to a short questionnaire.
- Safety
Your money is held by a regulated bank, never by us. Settlement runs through a sponsoring member bank registered with the card networks. Funds move from the network to the bank to your account. We instruct. We never hold.
- Transparency
One rate per transaction, nothing else. The same rate for every card, with no monthly fees. Your statement is sales, processing, and deposit. Month to month, with no early termination fee.
In practice
What we do, and what we never do.
Card data. Never in your systems, never in ours.
- Terminals are PCI-listed with validated point-to-point encryption. Card data is encrypted inside the reader and only the bank's processor can decrypt it.
- Online checkout runs in hosted fields served from our gateway, so card numbers never reach your website or your servers.
- Cards on file are stored as network tokens. A token is useless anywhere but your account.
- 3-D Secure on online orders moves fraud liability to the card issuer when it applies.
Your money. Held by a regulated bank until it lands in your account.
- Settlement runs from the card networks to a sponsoring member bank and then to your account. It never passes through an account we control.
- Funding is next business day by default, and every deposit matches a statement line for line.
- Chargebacks are itemized as they happen, and we help you build the response.
Your obligations. As short as we can make them.
- Point-to-point encryption and hosted checkout put you on the shortest PCI questionnaire available for your setup, and we walk you through it once a year.
- One rate per transaction, so your statement takes a minute to check.
- Accounts are month to month. If you leave, your hardware is yours and your data goes with you.
PCI
A shorter questionnaire, because less of it is yours.
PCI scope follows the card data. Encrypting it at the reader and keeping it off your website removes most of the requirements you would otherwise have to attest to every year. We handle the rest.
| Your setup | PCI questionnaire | Requirements to attest |
|---|---|---|
| Our terminals with point-to-point encryption | SAQ P2PE | 22 |
| Our hosted checkout online | SAQ A | Shortest online form |
| A typical terminal on your own network | SAQ C | 123 |
| Card data stored or handled in your systems | SAQ D | 249 |
How it works
Four steps between the tap and your deposit.
Money never sits in an account we control.
- 1
Your customer pays. Card, phone, or browser wallet. The terminal or checkout encrypts it on the spot.
- 2
We route and price it. Our gateway sends it to the card network and has an answer in under two seconds.
- 3
Your sponsor bank settles. A regulated bank receives the funds. They never pass through us.
- 4
You get paid. The deposit lands the next business day, with a statement that matches it line by line.
Disputes
When a customer disputes a charge.
Chargebacks are part of accepting cards. What matters is that you see them early, respond with the right evidence, and pay nothing when you win.
- 1
The dispute lands
You see it in your portal the day it is filed, with the sale, the reason code, and the deadline.
- 2
We build the response with you
Receipts, signatures, delivery confirmation, and your policy text, assembled into the format the issuer expects.
- 3
The issuer decides
Most in-person disputes with a chip or tap record resolve in your favor. Online, 3-D Secure shifts liability to the issuer when it applied.
- 4
The fee is settled
The chargeback fee is refunded when you win. Either way the outcome shows on your statement, itemized.
The bank behind us
Every processor works through a member bank.
Only a bank registered with Visa and Mastercard can extend card acceptance to a merchant. The bank sponsors us, registers us with the networks, and holds the funds between the sale and your deposit. That structure is what keeps your money out of our hands and keeps us out of money transmission licensing.
Our sponsoring member bank is named in the disclosure at the bottom of every page once the agreement is signed.
Ready to see your numbers?
Send us your volume or two recent statements and we reply with an itemized quote within one business day.