Your card never passes through Nyv
Checkout and payment-method management happen on Stripe's hosted pages. Nyv receives billing identifiers and statuses, never the full card number.
security and trust
Security isn't a badge. It's a sequence of barriers.
Identity, data, payments and auditing have separate responsibilities. No browser screen is treated as the source of truth.
04audittrail preserved
03paymentsignature verified
02authorizationresource ownership
01identityserver-side session
design controls01 02 03 04 05 06
The browser asks. The server decides.
Sessions are validated on the server
Session cookies are HttpOnly, Secure in production and SameSite=Lax. Authorization is checked again next to every piece of data and every sensitive change.
A webhook is evidence, not an order
Stripe events need a valid signature, idempotency and reconciliation. A checkout redirect never grants access on its own.
Less data, less risk
We collect the minimum needed. Secrets stay on the server; responses to the browser use reduced objects, without internal fields.
Critical actions leave a trail
Sign-in, password changes, plan changes, cancellation and administrative operations go into the audit log.
Fail closed
Without a valid configuration, an available database or a confirmed subscription, the system doesn't grant access for convenience.
operating posture
Production only exists with evidence of recovery.
Public operation depends on restorable backups, idempotent webhooks, a synchronized clock and a proven external monitor. Sign-up, billing and access are enabled by separate controls and stay closed when the required configuration or evidence fails.
Data
minimal retention and data export
Payments
Stripe Checkout + Customer Portal
Operations
logs without secrets + request-id answers
responsible disclosure
Found a problem?
Send an objective description to seguranca@nyviq.com. Don't send passwords, keys, personal documents or card data by email.
Test only Nyv IQ assets, using your own or synthetic accounts and data. Don't use brute force, denial of service, social engineering, persistence, access to third-party data or data extraction. Stop testing if you see unexpected impact and keep the report private while we fix it.
Good-faith research that respects these conditions will not be the target of legal action by Nyv IQ. This does not authorize breaking the law, contracts or third-party systems, and it is not a promise of a financial reward.