// payments & fintech
Payments and fintech platforms that reconcile every day
We built and took a US payments platform through PCI DSS Level 1 service provider validation — a QSA-led onsite assessment with a Report on Compliance and signed Attestation of Compliance — and through its PCI DSS v4.0 revalidation, with quarterly ASV scans. That's a different proposition from a team that has only read the standard. Processor integration, ledgers, disputes, payouts and identity checks, built by the team that has run this in production for years.
// what you get
- A platform we built taken through PCI DSS Level 1 service provider validation, with a QSA-led Report on Compliance and ongoing v4.0 revalidation
- 18 processors and gateways behind one interface, including Stripe, CyberSource, NMI, Finix, Mastercard Payment Gateway, FlexCharge, PayNetWorx and TriplePlay
- Visa and Mastercard card rails reached through acquirer and gateway integrations, never a direct card-network connection
- 3-D Secure, authorizations, captures, refunds and voids on every transaction
- Chargeback alerts, dispute evidence handling, decline recovery and each processor's fraud tooling
- Double-entry ledgers tracking reserves, fees, payouts, transfers and recipients, that reconcile automatically every day
- Invoicing, coupons and reporting built on the same ledger
- KYC and AML checks gating money movement before it happens, plus KYB verification and bank account linking
- Policy-based permissions with a fully audited act-as-user path
- Signed webhooks with retries and complete API request logs
- A public API with developer docs, a checkout library, an e-commerce plugin and a bilingual interface
- AES-256 encryption under managed keys, and observability dashboards for throughput, latency and error rates
Eighteen processors and gateways behind one API, a wallet with identity checks on every money-movement command, and a reconciliation process that runs daily — this is the work the case studies in our portfolio describe. We built and took the payments platform through PCI DSS Level 1 service provider validation — tokenization, no raw PAN storage, encryption in transit and at rest, segregated access — not a compliance claim we ask you to take on faith, but a QSA-led Report on Compliance and a signed Attestation of Compliance, followed by continued revalidation under PCI DSS v4.0 with quarterly ASV scans.
Projects from $85,000
// proof
Where we've done this
Payments · US
18 payment processors behind one API
An event-driven orchestration platform covering charges, 3-D Secure, disputes, payouts, identity checks and ledgering — which stayed online through a DDoS attack.
Fintech + AI
A compliant wallet platform, live in six months
USD and crypto wallets with transfers, swaps and cash-out. Identity checks gate every money movement, and AML triage runs on a self-hosted LLM with a human making every decision.
Payments · Events
Registration payments reconciled across two rails
A white-label registration and payment platform used for events at the top of their disciplines — including a World Rally Championship round and Tour de France events — that collects money by card online and by cash at physical payment-network counters, then reconciles both rails automatically against registrations.
Marketplace · Live events
A ticket marketplace where the crowd sets the price
A ticket marketplace where general-admission blocks sell by timed auction instead of a fixed price, with bids, price and outcome pushed to every watcher in real time and opened and closed on a schedule with no one at the controls.
Payments · Consumer
Reconciling a school's money to the cent
A crowdfunding platform for US school parent-teacher associations — schools raise money for projects with tiered rewards, donors pay by card as guests or signed in, and every donation reconciles to gross, fees, platform cut and net settlement.
30 minutes with a senior engineer.
Tell us what you're building. You'll leave with an honest opinion, even if it's "you don't need us."
Reference calls with past clients are available under NDA during evaluation.