DEVELOPER GUIDE
Security
0min
We deeply understand the importance of data security for payment initiation business.
All requests must be done using HTTPS and our access tokens have expiration time definitions according to the Brazilian Open Finance specifications.
Our keys are all secured by AWS CloudHSM, which is FIPS verified hardware. Passwords saved on our database are always encrypted with high security algorithms (RSA256).
We use AWS as the infrastructure and strictly follow cloud native best practices in terms of compliance, network isolation VPC, resource access rights, vulnerability detection, etc.