Security
Security you can rely on
HASKA Pulse treats payment evidence like money itself.
Device Layer
- No screenshots are trusted as payment proof.
- SMS is read only on an authorized gateway device.
- Biometric login required for configuration.
Transport Layer
- Events are cryptographically signed before transmission.
- Timestamped payloads to prevent replay attacks.
- End-to-end TLS encryption.
Application Layer
- Strict Role-Based Access Control (RBAC).
- Idempotent processing prevents duplicate records.
- Real-time alerting for anomaly detection.
Data Layer
- Tenant isolation is enforced server-side for every business.
- Transactions are immutable (append-only).
- Confirmations and reversals are tracked separately.
Compliance & Trust
Built to meet the highest standards of financial data security in the region.
ISO 27001
PCI DSS
SOC 2 Type II