Security at DraftPay

How are bank account numbers protected?

Account numbers are encrypted as soon as they're submitted, with a key the web app can't use to decrypt them. Screens and emails only ever show the last four digits. Only the separate printing service can decrypt an account number, at the moment it prints the draft.

How do people sign in?

Every user confirms sign-in with a one-time code texted to their phone, or emailed as a backup, and again before sensitive changes such as bank details. There's no authenticator app to set up. Each person on your team has their own login and role.

How is each authorization proven?

When your customer approves, DraftPay captures who signed, their verified email, the exact amount or cap, the time, their IP address and the full terms text, and seals it into a signed PDF. The database computes its SHA-256 hash, and the record is re-checked every time it's opened, so any change would show.

Records are kept in append-only storage, and every action in your account is written to a hash-chained audit log: changing any entry breaks the chain.

What stops a draft from going out by mistake?

• No authorization, no draft. A draft can't be approved until the payer has authorized it, or an owner or manager has recorded an authorization on file.
• Within limits only. Drafts must fall inside the authorized amount, frequency, total cap and dates.
• Two-person approval. Drafts above your threshold need a second teammate.
• The payer's own email. Approval requests can't go to an address on your own team or domain.
• Payers stay informed. They get a confirmation with a revoke link, and a notice for every draft under an ongoing authorization.

Who can use DraftPay?

Only verified businesses. We review each business and its owners before drafting opens. And every payer must be a business: DraftPay doesn't draft on consumer accounts.

Does DraftPay hold or move money?

No. DraftPay is software. You deposit check drafts at your own bank, so payments go straight to your account. Your DraftPay subscription is billed through Stripe.

How is access to data controlled?

The business rules live in the database itself. Every table enforces row-level security, so each business sees only its own data, and every change goes through a database function that checks the person's role and verification before it runs.