{"id":8,"date":"2026-09-25T10:26:31","date_gmt":"2026-09-25T10:26:31","guid":{"rendered":"https:\/\/demos.canvaswp.com\/ai-payments\/security\/"},"modified":"2026-10-01T08:57:50","modified_gmt":"2026-10-01T08:57:50","slug":"security","status":"publish","type":"page","link":"https:\/\/demos.canvaswp.com\/ai-payments\/security\/","title":{"rendered":"Security"},"content":{"rendered":"
\n
\n
\n
\n

Protection<\/p>\n

Controls at
every layer<\/em><\/h2>\n<\/div>\n
\n

From the token your agent holds to the network that settles the charge, each layer assumes the one above it can fail.<\/p>\n<\/div>\n<\/div>\n

\n
\n
\n<\/i>\n<\/div>\n
Tokenised credentials<\/div>\n

Agents receive a scoped token, never the raw card number. Card details stay inside our PCI DSS Level 1 environment.<\/p>\n

\n
"card"<\/span>: "tok_4532_\u2022\u2022\u2022\u2022"<\/span>,<\/div>\n
"cvc"<\/span>: null<\/span>,<\/div>\n
"scope"<\/span>: "browserless.io"<\/span><\/div>\n<\/div>\n<\/div>\n
\n
\n<\/i>\n<\/div>\n
Encryption everywhere<\/div>\n

TLS 1.3 in transit and AES-256 at rest, with keys rotated automatically and access limited to the services that need them.<\/p>\n<\/div>\n

\n
\n<\/i>\n<\/div>\n
Fraud detection<\/div>\n

Velocity checks and anomaly scoring on every authorization. Unusual merchants, places and amounts are blocked in real time.<\/p>\n

\n
<\/i> Card frozen<\/div>\n
New country, first purchase<\/span>$980.00<\/span><\/div>\n
Anomaly score<\/span><\/i> Blocked<\/span><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
\n

Compliance<\/p>\n

Audited, certified
and documented<\/em><\/h2>\n

Reports are available under NDA. Email security@canvasorbit.io<\/a> to request them or to report a vulnerability.<\/p>\n

\n<\/i> SOC 2 Type II<\/span>\n<\/i> PCI DSS Level 1<\/span>\n<\/i> Visa network<\/span>\n<\/i> GDPR ready<\/span>\n<\/div>\n<\/div>\n
\n
\n
\n