Security and trust at PayKarata
PayKarata is being built as a regulated electronic payment service provider. This page summarises the control areas that shape our platform design ahead of pilot and commercial launch.
Control areas
The framework we are building to
Executive summary level only. We do not publish infrastructure detail, fraud rules or internal recovery targets.
Identity and eKYC
Customer and merchant identity verification and screening are performed at onboarding, supported by a specialist eKYC and AML services provider.
Encryption and secure APIs
Data in transit and at rest is protected using encryption, and platform integrations are designed around secured APIs.
Strong authentication and access control
Strong customer authentication and role-based access control are part of the target design for both customer and internal systems.
Fraud and transaction monitoring
Transactions are designed to be monitored for suspicious activity, with escalation and case handling processes.
Customer-funds safeguarding
Customer funds are intended to be held in a dedicated trust account with our banking partner, segregated from company operating funds and subject to reconciliation and oversight controls.
Business continuity and recovery
Business continuity and disaster recovery planning form part of our operational readiness work ahead of launch.
Privacy and data protection
Our privacy approach is being aligned to Botswana data protection requirements, with data minimisation and purpose limitation as design principles.
Responsible disclosure
If you believe you have found a security issue, contact us at contact@paykarata.com and we will respond.
Dedicated disclosure channel coming soon
Important disclaimer
Security and compliance statements describe the target/control framework and are subject to production validation, partner evidence and applicable regulatory requirements.
Where certifications are referenced elsewhere on this site, they relate to the certification held by the relevant technology vendor for their solution, and are not a statement that every PayKarata component is certified. PayKarata does not claim that any system is completely secure.
PayKarata (Pty) Ltd was granted an Electronic Payment Service Provider licence in December 2025. Licence details and authorised service scope will be published before commercial launch.
Questions from your risk or compliance team?
We are happy to walk partners and investors through our control framework.