A focused, auditable stack: a routing and ledger core, processor-hosted card capture, and signed event delivery to your systems.
Each transaction is evaluated against the routing configuration for the merchant — processor, account and fallback order — and sent down the selected path in real time. Routing is deterministic and fully logged, so any payment's journey can be reconstructed later.
Checkout collects card details inside components served by our payment processors. Card numbers are tokenized by the processor and never touch XLY's servers or the merchant's. This design keeps the platform within PCI DSS SAQ A scope and removes the largest class of card-data risk by architecture, not by policy.
Every payment is scored by a rule-based engine using signals such as transaction velocity, amount deviation from the merchant's history, and device and network fingerprints. Scores drive automatic decisions — allow, review or block — and every review outcome is recorded for audit.
Payment, refund and dispute events are delivered to merchant systems as signed webhooks, with signature verification on every message. Settlement statements are generated from the same ledger that processes the payments, so dashboards, statements and payouts always agree.