PAYMENT PLATFORM

Our gateway is open, cloud-based and works with any payment type, anywhere in the world: cards, phones, crypto and whatever alternative methods your customers use. Open APIs connect your existing or new systems to a terminal management system (TMS). It’s built on the ISO 20022 open standard, which makes end-to-end payments Nexo-certifiable where applicable.

• A device-agnostic payment app and enhanced gateway functionality in one secure payment system, with a plug-and-play payment app ready for SmartPOS devices.
• Point-to-point encryption (P2PE) for most major hardware vendors, backed by application-level encryption and the latest version of Transport Layer Security (TLS).
• Fully cloud-based and independent of specific hardware or data centers, so it scales with demand. It handles heavy loads, with high availability and very little downtime needed for updates.
• Multi-tenant, with separate encryption zones for each customer. Run separate instances for different sales channels to build your own solutions and offer more tailored propositions to niche merchant verticals.
• Configurable reporting across every transaction on the platform.

Running payments across a mixed estate can often mean a different tool for every device type. We give you one secure, cloud-based portal and API to register, view and manage endpoint-level information across all of it. You can route payments to multiple endpoints while reporting on and managing them centrally.

Our device management system (DMS) adds remote visibility and control of SmartPOS devices:

• Install, uninstall and update software on the device remotely.
• Track device location, network status, battery level and available memory.

Not everything in a payment setup is a transaction. Endpoint management, data sharing and other services still need somewhere to live. We host those services in one place and expose them through a standard set of APIs.

• One standard set of external-facing APIs and a consistent developer experience.
• A self-serve sandbox where developers can find APIs by use case, then test, subscribe and integrate, with out-of-the-box documentation and monitoring.
• Governance across the API lifecycle, including publishing, versioning, usage policies and subscriptions.
• Workflow Manager, which orchestrates APIs to deliver value-added services without adding complexity.
• Standardized communication protocols, so the platform scales as you grow.
  Identity management and central governance through policy definition and enforcement.
• API analytics for visibility and monitoring.

Central portals show you how your merchants use their devices. That gives you a clearer read on which propositions suit which merchant types, where the cross-sell and upsell opportunities are, and a way to fix problems in the field remotely, without a site visit.

Through our Merchant Services, we also handle the physical side of the devices for you, from research and development through to implementation and delivery.

From traditional Linux terminals to Android SmartPOS and fully digital deployments like SoftPOS, our device-agnostic platform processes any kind of payment transaction, including cross-border and international payments, with security built in as standard. One unified management system takes the complexity out of running a mixed terminal estate and lets you deliver a consistent payment experience in any environment.

Apps flex to fit the merchant, whether that’s a simple standalone terminal or a fully integrated payment experience. Through our partner network you can add value-adds like loyalty programs and ratings, so the experience holds up even when customers pay with alternative methods.

Explore our apps

Our payment orchestration layer lets apps talk to each other and be chained into simple flows, which is what keeps checkout smooth. We handle the integration work so you don’t have to, and your merchants can run whichever applications suit their vertical best. 

Underneath, this full-stack payment platform runs on a cloud-based architecture that securely connects endpoints remotely to process card transactions and carries communication between POS clients and payment devices.

Security is built into every layer of the platform. We maintain and keep strengthening our PCI DSS, PCI PIN and PCI P2PE certifications.

• Disaster recovery: Countermeasures across our services help maintain availability and support recovery if something goes wrong.
• Penetration testing: Products undergo penetration testing during development and as they’re deployed to production environments, helping identify security weaknesses before they become a problem.
• Vulnerability management: Our environment is monitored continuously for new threats, and every product, server and network is maintained.
• SSDLC: A Secure Software Development Life Cycle means security is part of the build from the first line of code.