Card data never touches us

Payments are tokenised by Stripe and charged on your own account. We store the order, not the card. SOC 2 Type II, PCI DSS SAQ-A and GDPR ready.

Security

DELIVERYInstant

0card numbers stored on our servers

PCI SAQ-A scope

Card fields are hosted by Stripe, so your compliance burden stays minimal.

Two-factor on every account, SAML single sign-on on business plans.

SOC 2 Type II report available under NDA, refreshed annually.

What’s included

No add-ons, no upsell tiers for the basics. These are on every plan that includes security.

SOC 2 Type II audited

PCI DSS SAQ-A scope

GDPR and UK GDPR ready, DPA on request

Data encrypted at rest and in transit

Role-based team permissions

Full audit log of dashboard actions

Subscribe to order, subscription and refund events.

Checkout rendering, payment processing, webhooks and the dashboard are monitored independently, with incident history kept public.

New features, improvements and fixes, written in plain language.

Create your first checkout, embed it or share the link, and get paid. Free up to $2K in monthly sales.