How UniWeb protects merchants and payment operations.
We publish the controls that matter for Indian businesses: transport security, KYC gates, audit trails, partner verification and a named grievance path — without claiming licences we do not hold.
HTTPS everywhere
Dashboard, checkout and API traffic use TLS. Session cookies are protected; idle timeout applies on merchant and admin portals.
KYC before Live Mode
Live collections require verified documents, bank account, website review, video KYC where required, and signed merchant agreement.
Webhook & API integrity
Gateway webhooks are signature-checked. Merchant outbound webhooks use HMAC. API keys are separated for Test and Live.
Audit & maker-checker
Sensitive KYC and Live activation actions go through independent checker approval with immutable audit records.
Velocity & fraud signals
Failed login and non-QR payment abuse are rate-limited. Merchant QR checkout is high-throughput — UniWeb does not lock accounts for high frequency of small successful payments (up to 10 lakh/day).
Private KYC storage
New KYC uploads are stored outside the public web root with access limited to authorized staff viewers.
What we are — and what we are not
Uniweb Technologist PVT LTD operates a merchant technology platform. Live acquiring, cards, UPI settlement and payouts are provided through contracted banks and payment partners after commercial activation.
We do not claim that UniWeb independently holds an RBI Payment Aggregator licence, a banking licence, or a card-network membership. Those claims appear only when the relevant licence or partner agreement is in force and disclosed here.
Badges we will show only when true
We do not display PCI DSS, ISO 27001 or SOC 2 badges until an independent assessment is completed. Partner gateways (Razorpay, Cashfree, PayU and banks) maintain their own PCI and network certifications for card-present and card-not-present rails.
Named contact for complaints
Include merchant code and transaction/settlement ID. Do not send OTPs, PINs or passwords. Escalation: reply on the same ticket within 7 days if unresolved.
Open contact form