Security & compliance

Built for the people who clear vendors.

Before a retailer adopts a payment, a risk officer has to sign off. This page is for them — how funds move, how data is handled, and where BioePay sits in the flow.

Flow of funds

BioePay is the rail, not the vault.

The most important line for your compliance team: BioePay provides payment-processing access and does not hold or transmit consumer funds. Money moves between the shopper's bank and the retailer's account; BioePay operates the verification, the experience, and the recordkeeping.

Where the money sits
Funds settle from the shopper's bank account to the retailer's account. BioePay is not a custodian of consumer funds and is not positioned as a money transmitter in this flow.
Real-time verification
Every payment is validated at the point of sale against the account, drawing on decades of bank-account verification reaching the great majority of US accounts — the same infrastructure operated by our affiliated payments companies.
Authentication
Enrollment is opt-in and bank-verified. Payment is authorized by a PIN the shopper sets and controls — never shared over text and never the same secret used to log in.
Returns & recovery
Non-sufficient-funds handling and recovery are operated by BioePay, through a licensed recovery operation that resolves returned bank items every day — so the retailer is insulated from the exceptions.
Data
Payment data is first-party to the retailer relationship. BioePay handles account and transaction data under defined access, retention, and protection controls; detailed data-security documentation is available under NDA for vendor review.
Leadership

BioePay is new. Its leadership isn't.

BioePay's leadership has spent five decades in bank-account payments, across three distinct eras: check collection in the 1970s, point-of-sale authorization in the 1980s, and check conversion at the point of sale by the mid-1990s — turning a paper check into an electronic debit, at the same register, in the same moment, from the same funding source, with a better credential.

That third era included participating in NACHA's pilot programs for check conversion, being part of the group that worked with SVPCo and a consortium of independent banks to develop the SafeCheck program, and being part of the team behind a patent for authorizing a check at the point of sale and settling it through the debit network.

A lot has changed since the 1970s. We were part of each shift. This is the next one.

5 Decades
From check collection, to point-of-sale authorization, to check conversion at the point of sale.
80%
Of US bank accounts reachable for verification.
End to end
Authorization, risk, returns, and recovery — managed directly, not outsourced to third parties.
Vendor review

We'll meet your diligence process.

Request the full security, compliance, and licensing package for your risk and vendor-management teams.