Security
How BasanuPay protects your account, your customers and your money.
Payments verified on our servers
An invoice is marked paid only after the payment provider confirms the payment directly to BasanuPay with a signed notification. We check the amount, currency and invoice before recording it.
No double counting
Every provider notification is processed exactly once. If the same payment is reported again, your balance does not change.
Auditable ledger
Your balance is calculated from an append-only ledger of payments, fees, refunds and payouts. Manual adjustments require permission, a reason and leave an audit record.
Account protection
Passwords are hashed, sign-in attempts are rate-limited, and you can turn on two-step verification and sign out other devices at any time.
Verified sellers
Every seller completes identity or business verification before collecting payments. Verification documents are handled by our verification partner, not stored on public servers.
Card details never touch BasanuPay
Customers enter payment details on our payment partner’s secure checkout. BasanuPay never sees or stores card numbers.
Least-privilege staff access
Our team works under role-based permissions. Finance, compliance and support each see only what their role requires, and every sensitive action is logged.
Controlled payouts
Payouts go only to verified bank accounts, cannot exceed your available balance, and are reviewed before funds are sent.
Found a security issue? Email hello@basanupay.com with the subject “Security”. Please do not test against other users’ accounts or data.