Home / Security

Your data and your customers' cards, protected.

Security isn’t the part of payments you should have to think about. Here is how we keep card data safe, help you stay PCI compliant, and cut down on fraud and chargebacks.

PCI DSS compliance

Every business that accepts cards has to meet the card industry's security standard. We set you up correctly and walk you through it, so you stay compliant and avoid the monthly non-compliance fee many merchants pay by accident.

Encryption & tokenization

Card numbers are encrypted from the moment of the tap or swipe and replaced with a token, so the real number isn’t stored in the clear on your terminal or in your systems.

EMV chip & contactless

Chip and contactless payments carry the card networks' built-in security, which lowers fraud and shifts liability away from you on in-person transactions.

Fraud screening

Address and CVV checks, and secure authentication on online payments, help catch bad transactions before they cost you.

Chargeback support

When a customer disputes a charge, you get a real person to help you respond and fight the ones that aren’t fair, not a portal and a shrug. How chargebacks work, and how to keep them low →

Careful handling on our side

We limit who can see your information to the people helping you, and we handle the statements and documents you share with us securely.

How an online payment moves, what the customer sees Service blueprint with five stages from tapping pay to the money landing, showing what the customer sees above a line of visibility and what happens behind the counter below it: the AllProPay gateway turning the card into a token, the processor, card network and the customer's bank answering in seconds, and the funds settling to your bank account later, with only the token, the answer and the money ever reaching your records. ONLINE CHECKOUT SECONDS LATER Taps pay Token made Approved Receipt Money lands CUSTOMER SEES Enters the card at your checkout and taps Pay. The page holds for a moment. Nothing to do. Approved or declined shows on the screen. An order confirmation and a receipt by email. Nothing new. The purchase is already complete. LINE OF VISIBILITY BEHIND THE COUNTER ALLPROPAY The gateway collects the card, encrypted. It never touches your server. ALLPROPAY The card number becomes a token. The real number stays with the gateway. PROCESSOR NETWORK The processor routes it through the card network to the customer's bank, which says yes or no. YOU Your system stores the token and the answer, never the card number. YOU LATER Funds settle to your bank account as a separate step, on its own clock. YOUR RECORDS nothing yet the token yes or no the token and the receipt the money The real card number is never in your records. Only the token, the answer and the money reach your side. KEY Line of visibility Behind the counter, hidden work Where the token is made

The PCI fee you shouldn’t be paying

Most merchants pay a small monthly PCI fee. That part is normal. What isn’t normal is the larger PCI "non-compliance" fee that quietly appears when an account is never validated correctly. It is one of the most common avoidable charges we find on a statement. When we set you up, we get your compliance done so that fee goes away.

Security is a shared job, and we do our part

No honest processor can promise that nothing will ever go wrong, and you should be careful of anyone who does. What we can do is set you up on the right standards, keep the technical side handled, and be a real person on the phone if something ever looks off. That is the job, and we take it seriously.

Want your setup checked?

Send one recent statement. We’ll flag any PCI non-compliance fee and confirm your setup is clean. Free, no pressure.