Security

How RealPay protects information and services across our countries of operation.

Last updated October 2026

RealPay is committed to protecting the confidentiality, integrity, and availability of the data and payment transactions processed through our platform.

1. Security safeguards

We apply reasonable technical and organisational measures to protect information and services against unauthorised access, loss, misuse and disruption. Controls are proportionate to the relevant service and risk, and include access restrictions, secure authentication, encryption where appropriate, monitoring and security reviews.

2. Payment and supplier security

Payment security requirements depend on the product, payment scheme and parties involved. Applicable card services are subject to relevant Payment Card Industry Data Security Standard requirements. We assess relevant supplier risks and require appropriate confidentiality and security safeguards. Any certification or assurance statement applies only to its confirmed scope.

3. Resilience and incidents

We maintain procedures for managing security incidents, service continuity and recovery. We investigate reported incidents and take appropriate containment and remediation steps. Affected parties and competent authorities are notified when and as required by applicable law. No system is completely secure, and uninterrupted service cannot be guaranteed.

4. Your responsibilities

Protect passwords, devices, API keys and access credentials; limit access to authorised users; and maintain appropriate security for your systems and integrations. Comply with applicable payment security requirements. Immediately report suspected fraud, unauthorised access or security incidents affecting the services and cooperate with investigation and remediation.

5. Reporting and further information

Report incidents or vulnerabilities to info@realpay.co.za or call +27 12 347 0729. Do not include passwords or complete payment card details in your report. This public overview does not disclose sensitive security configurations or replace your agreement’s support and incident procedures. We review and update it as our practices or applicable requirements change.