Scheduled maintenanceScheduled maintenance: PayWise infrastructure maintenance is planned from Friday, October 9 at 7:00 p.m. ET through Monday, October 12 at 8:00 a.m. ET. Sandbox and Production services may experience intermittent interruptions during this period. Existing PayWise service URLs and SFTP hostnames will remain unchanged.
Skip to main content

Identity Security

Identity Security​

Minimum security expectations:

  • Use HTTPS only.
  • Validate redirect URIs strictly.
  • Rotate client secrets and signing keys regularly.
  • Use short-lived access tokens with refresh rotation.
  • Monitor unusual login attempts and token abuse.

Environment separation​

  • Sandbox identity and production identity must be isolated.
  • Never reuse sandbox credentials in production.

Login policy​

  • Passkeys preferred
  • TOTP fallback
  • Recovery flow with audit trail