No PAN on disk
Full card numbers and CVV are not stored in the database. Logs scrub card-like patterns.
NO KYC crypto card
Built to refuse the wrong trade-offs
Security here means clear limits on what the software will do. IndevBank is a NO KYC crypto card, serving cardholders since 2016, with 235,000 active cards worldwide. Identity documents are not collected.
Price checks
When price feeds disagree or go stale, new card payments pause rather than using an unvalidated price.
Double-entry ledger
Every balance change is a balanced ledger transaction with business idempotency keys.
Session hygiene
Short-lived access tokens, rotating refresh tokens, step-up for withdrawals and admin MFA.