How card data flows
The customer taps or inserts a card on a certified terminal. The card data goes from the terminal to our acquiring bank. We receive masked card numbers and response codes only, so full card numbers never reach our servers.
Security
How we protect your money and data.
Plain language, with no claims we can’t back up.
- Card data is captured on certified terminals, never on our servers
- Merchant funds are held in a segregated account, separate from our own
- Two-factor sign-in is mandatory for every user
- Payouts are released under dual control
- Daily three-way reconciliation
- Transaction monitoring on every site
- POPIA-compliant handling of your data
Card processing runs on a major South African acquiring bank’s certified payment application.
How your money is safeguarded
Funds due to caterers are held in a segregated account, separate from V&S’s own money.
Who can move money
Payouts are released only after reconciliation and two separate approvals. Changes to payout bank details are verified by a callback to the contact you mandated, on the number you gave us.
Monitoring
Every site is monitored for unusual activity, and alerts reach every user on your account.
Access control
Two-factor sign-in is mandatory for every user. Managers see only their own site. You can restrict sign-in by IP address and country, and review active sessions.
Data protection and POPIA
We collect only what we need to verify and serve your business, record your consent, and handle personal information in line with POPIA. See the privacy notice.
Hosting
Hosted in South Africa.
Ready to take card payments at your sites?
Apply online in about 15 minutes. Already a Caterly customer? We’ve prefilled most of it. No card machine purchase; terminals are provisioned by us.
Card payment services are provided by V&S Payments, a division of V&S Innovations (Pty) Ltd.