Skip to content
Finero
Security and compliance

The safest data is the data we never hold.

Finero sits between your ERP and your payment provider, handling invoices, customer records and payment flows. The most important thing to understand about how it is built is what it deliberately never touches: your customers’ card numbers, and your money.

No cardholder data

Finero never collects, stores or transmits cardholder data: no card numbers (PANs), CVVs or full track data. Card details go straight from your customer to your payment provider. There is no card vault to breach because there are no cards in it.

Funds never held

Money settles directly to your merchant account on your existing payout schedule. Finero never takes custody of customer funds.

GDPR-aligned privacy

Personal data is minimised, processed only for defined purposes, and retained only as long as needed for the purposes in our Privacy Policy.

Full audit trail

Finero keeps an audit log of collector actions, payment events and ERP write-backs, with actor and time.

No change to your PCI scope

Finero uses provider-hosted payment pages, so it does not bring additional systems into PCI scope. You keep your existing merchant agreement, payment provider relationship, and current compliance position.

Your ERP stays the system of record

Invoices and customer records flow into Finero so it can chase and match them. Payments and reconciliation entries flow back. The direction of authority never changes: your ERP remains the ledger of truth, and Finero is an operational layer on top of it rather than a replacement for it.

Write-backs are recorded in the audit log with the actor and the time, so entries Finero posted can be traced to the action that caused them. That matters for internal controls, and it matters in a dispute, where a documented contact and payment history is the evidence that reasonable steps were taken.

Security review and documentation

If your security team runs a formal vendor review, raise it during your demo and we will route the questionnaire to the person who can answer it properly. For how personal data is handled, see the privacy policy.

Bring your security team to the demo.

Book a 30-minute demo with a Finero expert. See how Finero chases, collects, and reconciles invoices end-to-end.

30 minutes · No commitment

Security questions

Does Finero collect or store our customers' card details?

No. Finero never collects, stores or transmits cardholder data: no card numbers (PANs), CVVs or full track data. Your customers enter card details on your payment provider's secure checkout, and they go directly to the provider. Finero receives only the payment result to reconcile the invoice.

Does Finero hold our money?

No. Funds settle directly into your own merchant account on your existing payout schedule. Finero never takes custody of your cash, which means there is no float, no commingling of funds, and no dependency on Finero's solvency for you to be paid.

How does using Finero affect our PCI DSS scope?

Finero uses provider-hosted payment pages, so it does not bring additional systems into PCI scope. You keep your existing merchant agreement, payment provider relationship, and current compliance position.

What does Finero read from and write to our ERP?

Invoices and customer records flow into Finero so it can chase and match them. Payments and reconciliation entries flow back so your ERP stays the system of record. Your ERP remains the ledger of truth; Finero does not replace it.

Can we see who did what?

Yes. Finero keeps an audit log of collector actions, payment events and ERP write-backs, recording the actor and the time, so changes can be traced to the person or process that made them.

Can we get security documentation for our review process?

Yes. Ask during your demo and we will route your security questionnaire to the right person rather than sending a generic pack.