Secure payments, every time
Card processing and bank transfers are handled by our regulated payment provider. Everything around them is ours to get right, so security isn't a feature. It's the job. Every protection on this page is live in the product today.
Card details never touch our servers
Your card is handled by our regulated payment provider, the same infrastructure behind checkouts you use every day. We hold the name on the card, its brand, its last four digits and its expiry, nothing more.
Suppliers are paid from settled funds
We only send your supplier's bank transfer once your card payment has cleared, never from money we're still waiting on.
Every movement of money is written down
The card charge, our fee and the supplier payout each get their own line in a ledger you can see.
Built on regulated payment infrastructure
Card processing and bank transfers are handled by our regulated payment provider, the same infrastructure behind checkouts you use every day.
How we keep it safe
Card details never touch our servers
Your card is held by our regulated payment provider. We keep the name on the card, its brand, its last four digits and its expiry, nothing more.
Multi-factor authentication
Sign-in uses multi-factor authentication. Passwords are screened against known breaches, and sign-in attempts are rate-limited.
Role-based access and approvals
Roles decide who can pay, the approval workflow you set holds anything over your limit until someone on your team approves it, and sessions expire when idle.
UK-hosted data
Your data is hosted in London, encrypted in transit, with sensitive secrets encrypted at rest and point-in-time recovery.
Managed infrastructure
A fully managed serverless platform with automatic patching, restricted credentialed data access and security event logging.
Written down and planned for
A security policy, system access control policy, business continuity plan, disaster recovery plan and incident response plan.
Questions, answered
Do you store my card number?
No. Our regulated payment provider holds it. We keep the name on the card, its brand, its last four digits and its expiry, so you can recognise it in a list.
When is my supplier actually paid?
Once your card payment has cleared. We never pay a supplier from money we're still waiting on.
Where is my data kept?
In the UK, in London, encrypted in transit and with sensitive secrets encrypted at rest. Every business's data is kept apart from every other's.
Can someone on my team pay without my say-so?
Only if you let them. Roles decide who can pay, and the approval workflow you set holds anything over your limit until someone on your team approves it, before the card is charged.
Ready to put your bills on the card?
No monthly subscription. You pay only when you pay a bill.
Create your account