Security
Money is only as safe as the process around it.
Tranzaq is built so no single person, password or mistake can move money. These are the controls that exist in the product today.
Two people for every payout
The person who prepares or submits a batch can never approve it. You set how many approvers each amount needs.
One-time codes for approvals
Approval steps can require an authenticator code, so a stolen password alone cannot release money.
Encrypted account numbers
Bank and mobile money numbers are encrypted when stored and shown masked, never in full.
Passwords and secrets are hashed
We store only a fingerprint of passwords and API secrets, so we cannot read them and a database leak cannot be used to sign in.
A double-entry ledger
Every movement of money is a balanced entry that is never edited or deleted. Balances are worked out from the entries, not stored.
Safe to retry
Payments and API calls carry idempotency keys, and our processing is built so a repeated message can never move money twice.
Signed messages
Messages from payment partners are verified by signature and confirmed with the partner before we act. Webhooks we send you are signed too.
A full audit trail
Who did what, and when: approvals, logins, changes to people and settings are all recorded.
Separate test and live
Test mode runs on its own database with fake money. Test data and real data can never mix.
Limits and alerts
Per-payment, per-batch and daily limits, rate limits on the API, and alerts for unusual payouts reviewed by our team.
Every business is separate
Each business can only ever see its own people, payments and statements.
Stop in an instant
Revoke an API credential, end a session, or suspend a business and it takes effect at once, even for sign-in tokens already issued.
Our promise
Honest about what we do and do not claim.
We describe the controls we have built, and we do not claim certifications we have not earned. As we reach standards and audits we will list them here.
Found a vulnerability? Please tell us at security@tranzaq.com. We will respond quickly and we will not take action against people who report in good faith.
Get started
Pay your people with confidence.
Create your business account and try everything in test mode today.
