The safest card data is the card data we never hold
PaymentHood is built on a single principle: reduce what can be lost. We do not store, process, or transmit cardholder data. Card details travel directly from your customer to your payment provider's certified infrastructure, and PaymentHood orchestrates every payment using tokens alone.
Minimise the blast radius
If sensitive data never enters a system, it cannot leak from it. Tokenization is our first control, not our last.
Isolate every merchant
Each merchant's credentials are encrypted under their own dedicated key, so no two merchants ever share an encryption boundary.
Make everything provable
Signed webhooks and end to end audit logs mean security claims can be verified, not just trusted.
Where Card Data Goes, and Where It Does Not
The unified customer token model. Follow the card and you will see it never reaches us.
- Customer Card Entered by your customer at checkout
- Provider Received by your provider's certified infrastructure
- Payment Token The provider returns a token. The card is never exposed
- PaymentHood Orchestrates and routes using the token only
- Encrypted Storage Token stored with AES-256 under a per-merchant key
Card data flows only between your customer and your provider. Everything PaymentHood touches is a token, which is precisely why we carry no PCI scope and neither does the integration you build on us.
One Customer Reference, Many Providers
Your systems work with a customer ID and an amount. PaymentHood resolves everything behind it: which stored token to charge, which provider to route to, and in which currency.
- Tokens are issued by the provider, never minted by us
- Your integration never handles a PAN, CVV, or expiry date
- Swap or add providers without re-collecting payment details
Every Action, On the Record
PaymentHood records the full lifecycle of every payment: each status change, when it happened, who triggered it, and why, alongside every gateway interaction and webhook delivery attempt.
- Complete payment lifecycle with actor and reason
- Every gateway call and webhook delivery attempt
- End to end tracing for any investigation
Strong Cryptography at Every Layer
At rest, in transit, and in every notification we send.
AES-256 at Rest
Every merchant's payment provider credentials are encrypted at rest with AES-256, using a dedicated key per merchant.
Sealed Keys
Encryption keys are themselves sealed with AES-256-GCM authenticated encryption under a master key held in a managed key service, never stored beside the data they protect.
TLS in Transit
All traffic between your systems, your customers, and PaymentHood is protected with HTTPS/TLS. End to end, with no exceptions.
HMAC-SHA256 Webhooks
Every webhook is signed and timestamped, so you can verify each notification came from PaymentHood and was not tampered with or replayed.
Least Privilege, Enforced
Who can reach your account, and what they can do once they are in.
Enforceable MFA
Sensitive account actions are protected by TOTP multi-factor authentication using Google Authenticator or any compatible app. Administrators can make MFA mandatory across their entire team.
Role-Based Team Access
Invite your team with role-based permissions so every member is scoped to exactly what they need and nothing more.
JWT and OAuth 2.0
API and session access use industry standard JWT tokens and OAuth 2.0 flows for authentication and session management.
You Control the Secrets
Generate and rotate your webhook signing secret at any time, or disable signing entirely. Add your own Authorization header when your endpoint requires one.
Risk Signals, Watched Automatically
PaymentHood applies AI-assisted risk analysis to payment behaviour, so unusual activity surfaces without adding friction to ordinary checkouts.
Behaviour-based
Payment activity is assessed against how your customers normally behave, rather than against a fixed list of rules that never changes.
AI-assisted
Scoring is model-driven, so it keeps working as patterns shift instead of going stale the moment someone learns the rules.
Deliberately unpublished
We do not document our signals, weightings, or thresholds. Publishing them would hand the people we are defending against a map of exactly what to avoid.
Evaluating PaymentHood and need more than this? Talk to us and we will go further under NDA than we will in public.
Built to Keep Running
Managed cloud infrastructure, asynchronous delivery, and isolated environments.
Managed Cloud Platform
PaymentHood runs on Microsoft Azure, with logs held in secure cloud logging under managed retention policies.
Resilient Delivery
Webhook events are queued and delivered asynchronously with automatic retries when your endpoint is temporarily unavailable, so a brief outage on your side never loses an event.
Isolated Environments
Sandbox and live are fully separated: separate credentials, separate configuration, no crossover. Going live is a credential swap, not a code change.
Scope Reduction by Design
The most reliable way to satisfy a cardholder data requirement is to remove the cardholder data.
- Cardholder data
- Never stored, processed, or transmitted by PaymentHood
- PCI scope
- Card data is handled entirely within your payment provider's own certified environment. PaymentHood works only with provider issued tokens.
- Provider certification
- Each connected provider maintains its own certifications for the card data it handles on your behalf.
- Data residency and retention
- Audit and delivery logs are retained on Microsoft Azure under managed retention policies.
Need documentation for a vendor review or security questionnaire? Contact us and we will work through it with you.
If Something Goes Wrong
How we detect, contain, and communicate.
Detect
Platform and gateway interactions are continuously logged, so anomalies surface against a complete record.
Contain
Per-merchant key isolation limits the reach of any single issue, and credentials can be rotated immediately.
Investigate
End to end audit trails let us reconstruct exactly what happened, when, and to which payments.
Notify
Affected merchants are contacted directly with what we know, what we have done, and what you should do.
Responsible Disclosure
Found a vulnerability? We want to hear from you before anyone else does. Report it privately and we will acknowledge your message, investigate, and keep you updated until it is resolved. Please give us reasonable time to fix an issue before disclosing it publicly, and avoid accessing or modifying data that is not yours while testing.