- Card data
- Card numbers are entered into our payment partner's form and go straight to it. They never touch our servers.
- Accounts
- Passwords are stored with Argon2id. Two-factor authentication is available to every merchant and required for our staff.
- Access
- Staff access is role-based and enforced on the server. Sensitive actions need a reason and are written to an audit log that cannot be edited.
- Money
- Balances come from an append-only double-entry ledger, which is reconciled against our payment partner's records on a schedule.
- Webhooks
- Incoming events are signature-checked, and your webhooks are signed so you can verify them.
