Security

Securing Your Integration

Security is a shared responsibility. While Payceler ensures API-level encryption and access controls, your team must enforce safe practices in your integration.

Recommended Best Practices

1. Keep Secrets Secure

• Never commit secrets to version control.

• Store keys using environment variables or a secure secrets manager.

2. Rotate Keys Regularly

• Schedule periodic key rotation to limit risk if a key is compromised.

3. Use HTTPS Always

• Ensure all traffic between your servers and Payceler uses HTTPS to prevent data interception.

4. Monitor API Usage

• Review access logs and audit activity in your Payceler dashboard regularly.

• Set up alerts for unusual behavior or spikes in traffic.