Features

Everything the majors give you. Plus the orchestration they don't.

Orchestration

Multi-provider routing: Currency and channel capability matrix picks the right gateway automatically — or pin one per session.
One account, many apps: Every app gets keys, checkout config and its own webhook endpoint over your single provider account.
Per-app overrides: Set provider credentials at tenant level, override per app. Test and live strictly separated.
Unified ledger: Transactions from every provider in one timeline with fee breakdowns and provider references.

Inline widget: Runs in a hardened overlay inside your site. No redirects, no leaving the page.
Hosted page: Mobile-native payment page with method chooser, status screens and receipts.
Idempotent sessions: Idempotency keys on creation, short-lived signed client tokens, domain-bound framing.
Method chooser: Card, bank transfer, USSD, mobile money and wallets — based on provider capability.

Signed webhooks: HMAC-SHA256 with timestamp, verified with your app secret. Copy-paste verification code in docs.
Retries & dead-letter: Exponential backoff up to 8 attempts, then parked for one-click replay.
Event log: Every provider event and every delivery attempt, inspectable payload and signature included.
Provider verification: Verify authoritative state server-side any time via the API.

Encrypted at rest: Provider credentials sealed with AES-256-GCM field-level encryption.
Hashed keys only: Secret keys stored as SHA-256 hashes, constant-time compared, reveal-once UX.
Rate limits: Per-key and per-IP buckets on every public endpoint with Retry-After headers.
Audit trail: Every dashboard mutation logged: who, what, target, IP, user agent.