Security is not a product, but a process - Bruce Schneier

In today's digital landscape, data security is paramount, especially when it comes to online payments. At Hyperswitch, we've built our platform with security as a fundamental principle. Let's explore the robust measures we've implemented to ensure a safe and secure payments infrastructure.

Our Top Priority: Customer Security

When a customer makes a payment through Hyperswitch, their card information is immediately encrypted at the source. We use the SSL/TLS 1.2 protocol for transmission, adhering to PCI standards for handling card data.
For customers who opt to store their card details, we've developed a secure Card Vault. This system employs multiple layers of protection:

• SSL/TLS 1.2 encryption
• JWE + JWS for secure data transmission
• Double encryption for stored data
• A two-key custodian system for enhanced security

Additionally, all customer Personally Identifiable Information (PII) is TLS encrypted in transit and AES encrypted at rest.

Keeping Your Business Secure

For our merchant, we know that not everyone needs to be in on all the secrets. That's why we've built up an access control system that's more discerning. API credentials? We treat those with more care than a rare vintage car, wrapping them in layers of AES encryption. Also, we mask the sensitive merchant details in the dashboard.

Hyperswitch's Approach to Security

At Hyperswitch, we're not just building a payment system; we're crafting a digital fortress. Our multi-tenant system comes with unique data encryption keys for each business, creating a security layer that's both impressive and effective.
We've also enlisted Rust as our companion, using its robust type system to keep sensitive information under wraps. It's like having a very diligent, slightly obsessive assistant who never lets a secret slip.

Serious Security with a Smile

In the end, we're not just developing an application; we're creating a secure future for digital transactions. Our goal is to allow businesses to focus on their core competencies while we ensure the protection of their customers' financial information.
With Hyperswitch, security isn't just a feature—it's a cornerstone of our service. We're dedicated to maintaining the highest standards of data protection, giving both merchants and customers peace of mind in their digital transactions.

Want to contribute? Check out some of our good first issues here.
Try Hyperswitch. Get your API keys here. Happy reading!