Controls you can trace, not promises you must take on trust

Every control below is implemented in our platforms today and demonstrable on request - not a roadmap item.

Payment Idempotency

Three independent layers of protection prevent duplicate payments by combining database uniqueness constraints, stable idempotency keys across retries and gateway-side duplicate rejection. Payment intent is recorded before submission, ensuring no transaction can be lost or duplicated due to system interruption.

Segregation of Duties

A comprehensive role-based access model includes eleven distinct user roles and more than forty granular permissions. Critical payment batches require dual control, ensuring the approver and processor are always different individuals, with dedicated Auditor and Safeguarding Officer roles supporting independent oversight.

Secure Authentication

Access is protected through multi-factor authentication, passkey (WebAuthn) support and secure device-bound sessions. Beneficiaries are verified using one-time PINs delivered via email or SMS, while rate limiting and session controls help prevent unauthorised access.

AML Compliance

Configurable Anti-Money Laundering (AML) checklists are enforced at institution level, ensuring required compliance documentation and verification steps are completed before enrolments or payment approvals can proceed through the platform.

Complete Audit Trail

Every login, approval, rejection, payment batch, retry, export and system update is permanently recorded with before-and-after values, user identity, IP address, device information and timestamps, providing complete accountability and traceability.

Webhook Integrity

All inbound payment status webhooks are cryptographically verified before processing using signature validation, timestamp verification and merchant identity checks. This ensures settlement updates are authentic, tamper-resistant and processed securely without duplicate or fraudulent events.

Secure Infrastructure

Hosted within the AWS Africa (Cape Town) region, the platform uses containerised services in private subnets, managed PostgreSQL and Redis, web application firewall protection, secrets management, network flow logging and automated infrastructure-as-code deployments for enterprise-grade resilience.

Trust Account Protection

Client funds are safeguarded through dedicated trust accounts held with a sponsoring bank, providing secure segregation of third-party funds, clear audit trails and enhanced protection throughout the payment lifecycle.

Insurance & Risk Protection

Professional Indemnity and Fidelity Fund Insurance provide additional operational protection, reinforcing IPS's commitment to responsible payment processing and financial risk management.

Intelligent Payment Solutions (Pty) Ltd
Licensed Third Party Payment Provider · Operator of the National Student Disbursement System
In group partnership with Regulating Africa (Pty) Ltd — FSP 54878 · regulatingafrica.com

All platforms hosted in-country in the AWS Africa (Cape Town) region. Verification reports, findings registers, and live demonstrations available on request.

This website uses cookies.

We use cookies to analyze website traffic and optimize your website experience. By accepting our use of cookies, your data will be aggregated with all other user data.