Security & Compliance
Built to protect your money and your data
RohoPay is engineered for a low-risk, auditable payments platform. Here is exactly how we keep transactions, funds, and customer data safe.
How we protect you
RohoPay is engineered for a low-risk, auditable payments platform, end to end.
Cardholder data never touches our servers — the transaction fee is the only thing you pay
What that guarantees you
Every control below exists so a retried request or a compromised credential can never move money twice.
Encryption everywhere
All traffic is encrypted in transit with TLS 1.2+. Sensitive data at rest is encrypted, and cardholder data is never stored by RohoPay.
Fail-closed secrets
Signing and application secrets abort startup in production when unset — there are no compiled-in defaults that could leak into logs or images.
Signed webhooks
Provider webhooks are verified with HMAC-SHA256 or a shared secret depending on the payment channel. Requests with a missing or invalid signature are rejected.
Exactly-once money movement
Payments and webhooks are idempotent and reconciled through a ledger, so a retried provider callback can never double-credit or double-charge.
Audit & access control
Sensitive operations are audit-logged and role-gated. Privilege operations (e.g. creating admins) require a super-admin caller.
Rate limiting & monitoring
Authentication, withdrawals, and payouts are rate-limited and monitored, with anomaly patterns surfaced for review.
Card data and PCI DSS scope
New RohoPay checkout flows send cardholders to provider-hosted pages to enter card details and complete any required bank authentication. RohoPay is removing card-number and CVV collection from its own checkout screens. Hosted checkout can reduce direct card-data exposure, but it does not by itself establish RohoPay's PCI DSS certification or SAQ eligibility. The applicable scope must be confirmed against the live payment flow with the acquiring bank or a qualified assessor.
Compliance & responsibility
KYC / AML
Every merchant is onboarded with know-your-customer checks, and transactions are monitored for anti-money-laundering patterns.
Data protection
We minimize the PII we collect, encrypt it at rest, and honor data-subject access and deletion requests.
Responsible disclosure
Security researchers can report vulnerabilities confidentially. We acknowledge and remediate verified issues promptly.
Compliance statements describe RohoPay's design and controls. Formal certifications, licensing, and regulatory approvals vary by market and are confirmed during merchant onboarding.
Settlement SLA
How quickly collected funds reach you. “Business day” excludes weekends and public holidays.
| Method | Settlement | Detail |
|---|---|---|
| Mobile Money (MTN, Airtel, M-Pesa) | T+1 business day | Funds land in your wallet within one business day. |
| Cards (Visa, Mastercard) | T+2 business days | Settlement follows acquiring and network cycles. |
| Test mode | Instant (no real funds) | Sandbox flows are free and move no real money. |
| Wallet → Bank withdrawal | Within 24 hours | Processed on demand, subject to daily limits and compliance checks. |
flat commission on successful transactions
No setup fees. No monthly platform fees. The same 1% rate applies to mobile money and cards alike, and test mode is free forever.
Ready to accept payments securely?
Start free — no card required for test mode.