Security & identity management

Kashier is a PCI DSS Level 1 Service Provider — the highest level in the standard — and identity and access are built in, not bolted on. Sign in with two-factor authentication and biometric login on the dashboard, so a stolen password alone cannot reach your money or your data. Card data is tokenized and Kashier does not store raw card numbers, keeping your integration and your customers out of PCI scope wherever possible. Role-based access separates cashiers, analysts, finance, and admins, and every sensitive action is written to an activity log your team and auditors can review. For integrations, issue API keys to identifiable technical users and rotate them on your own schedule; access is protected with the transport-layer security your team already expects. For due-diligence questionnaires, our PCI attestation, or pen-test evidence, reach out through your account team or the contact page.