A complete acquiring platform, from the terminal to clearing
PayZero is ByteZero's acquiring platform: card network authorization, Pix, a white-label portal, Android terminals and an HSM on a single infrastructure, for acquirers, sub-acquirers and merchants.
- Native ISO 8583 with Visa and Mastercard
- Card, Pix and palm payments
- White-label portal in 3 languages
- PIN and keys protected by an HSM
One platform for the whole acquiring operation
Acquiring host, management portal, terminal app and key vault, built together. Acquirers and sub-acquirers share the same infrastructure, each with their own data, rules, brand and team, with no new system to stand up for every client.
Truly multi-tenant
Platform, acquirer, sub-acquirer and merchant in one hierarchy: each one sees and configures only its own branch.
Its own acquiring host
The processor builds the ISO 8583 messages, talks straight to the card networks and produces the Visa BASE II and Mastercard IPM clearing files every day.
Antifraud in the path of the sale
FraudZero configured per acquirer: inform only, query in parallel with the network or decide first, with actions by risk band and by score.
Your brand, not ours
A portal with your own logo, colors, name and domain, and a terminal app wearing the theme of the provider, the group or the merchant.
Card, Pix, palm and links on one processor
Card, Pix, palm and payment links follow the same rules, go through the same antifraud and show up together in the portal's transactions.
Card
Credit, debit and voucher by chip, contactless or magstripe, with online PIN verified in the HSM.
- Merchant or issuer installments, by BIN
- Pre-authorization captured by code, QR or card
- Automatic reversal of unknown outcomes
Pix
Charges with a QR code on the terminal's screen and instant confirmation, through each acquirer's PSP.
- Efí connector, with an mTLS-protected webhook
- Limits per charge, per day and per month
- Cancellation right at the terminal
Palm
Palm vein biometrics: customers enroll their card once and then pay without taking it out of the wallet.
- Card tokenized at the network or kept in a vault
- PIN required above an amount
- Limits per sale, per day and per month
Payment link
Remote sales with their own checkout, on the same authorization flow as the terminals.
- Created in the portal or through the API
- Antifraud on the e-commerce channel
- Alongside in-store sales in the portal
Every level of the chain with its own access
Users sign in with account, e-mail, password and authenticator, and see only the branch they belong to, with roles and policies set by the level above.
-
1
Platform
Runs the infrastructure, registers card networks and acquirers and oversees everyone's clearing.
-
2
Acquirers
Have their own BIN and card network links; set parameters, antifraud, decline messages and the terminals' look.
-
3
Sub-acquirers
Onboard merchants on top of the acquirer's operation, with their own brand, domain, team and rules.
-
4
Merchants
Follow sales, refunds and terminals, customize the payment app and link child stores (MultiEC).
Six pieces that already work together
From the server that authorizes the sale to the team's phone, everything is built together on the same contracts, with no stitching of systems from different vendors.
Processor
The platform's API: authorization, capture, cancellation and reversal, BIN routing, idempotency and daily clearing, with Efí, Pagar.me and Mercado Pago connectors.
Web portal
The whole operation managed in 11 layouts and 3 languages, with PDF reports, an audit trail and white label on your own domain.
POS app
Android app for WizarPOS Q2 and Q3, EP5855 and ByteZero B1: card, Pix and palm, printed or on-screen receipts and partner app integration.
Staff app
The portal on the phone, for Android and iOS: connects by QR, opens with the phone's biometrics, refunds sales and grants technician access to the terminal.
HSM service
On a Dinamo HSM: translates the PIN from the terminal's DUKPT to the acquirer's ZPK, opens encrypted card data and manages keys as TR-31 key blocks.
Simulators
Simulated Visa, Mastercard, tokenization (VTS and MDES) and Pix, plus the ByteZero B1 POS simulator, to certify without touching production.
Your POS fleet, managed remotely
A terminal is activated with a 4-digit code or a QR code and, at every check-in, gets parameters, EMV tables, theme and app updates from the processor.
- Remote app updates, with SHA-256 checked
- Versioned parameters and EMV tables
- Terminal groups with their own look and packages
- Theme with colors, logo, welcome text and receipt logo
- Kiosk mode and a video promo on the idle screen
- Allowed area and terminal location
- Technical logs captured remotely
- Technician and supervisor access by QR in the Staff app
Card data protected at every step
PIN, card number and keys never show up in clear outside where they must be: in the PIN pad, in the HSM or in the processor's memory during the operation.
PIN translated in the HSM
The PIN leaves the PIN pad encrypted and is translated inside the HSM; a captured block is never accepted twice.
Card encrypted at the PIN pad
With the DUKPT data key, the card travels encrypted from the terminal to the processor and is stored with AES-256.
Keys in custody
Processor keys in AWS Secrets Manager, with phased rotation of the card data key and no downtime.
Masked logs
ISO 8583 messages and logs show only the first 6 and last 4 digits; tokens are removed and e-mails masked.
Every action audited
Every call by a user or an API token is recorded in the audit log, filterable by author.
Role-based access
Sign-in with password and authenticator (TOTP), roles and policies per organization and API tokens limited to their branch.
How a sale goes through PayZero
From the terminal to the card network: PayZero queries antifraud and the network in parallel and answers in seconds, approving or declining.
Ready to run your own acquiring?
Talk to ByteZero and see PayZero running with your BIN, your brand and your terminals.