Security & Cryptography Protocol

Enterprise-grade safeguards protecting payment orchestration layers.

Lipa Na RiverPen is designed around security-first paradigms. We employ robust cryptography to shield merchant secrets, API credentials, and client transaction payloads.

Lockout Controls

Accounts are automatically locked after 5 consecutive verification failures to block brute-force patterns.

Timing-Safe checks

All token checks and secret verifications utilize timing-safe byte comparison algorithms to prevent side-channel timing disclosures.

SHA-256 OTP Hashing

Authentication codes and recover tokens are never saved as plaintext in PostgreSQL; they are stored as one-way SHA-256 hashes.

Database Safeguards

Integrated on Neon's secure cloud database with TLS 1.3 encryption-in-transit and AES-256 encryption-at-rest.