Payments
A payment gateway from scratch that became its own business
The gateway outgrew the company that built it and became a business of its own.
See the project ↗Services / Payments
Build confidence into the payment path.
Payment flows, gateway integrations, and boundaries designed with the care that moving money deserves.
Does this sound familiar?
A good fit when…
- A product needs checkout, billing, or a gateway integration
- Card data reaches more systems than it needs to
- Payment changes need better tests and monitoring
From the problem to the handover
What we’ll build.
What you’ll keep.
Money moves through your software, and every change carries risk: to customers, to compliance and to the business itself. The safest-looking option is to change nothing, which is how payment code goes stale.
- 01 / Deliverable
Payment flows built or extended with tokenization, so card data stays out of systems that do not need it
- 02 / Deliverable
Compliance scope kept small, with each business kept inside its own boundary
- 03 / Deliverable
Fraud signals and monitoring in the transaction path
- 04 / Deliverable
Checkout screens built on those tokenized payment flows
- 05 / Deliverable
Tests around every path that moves money
How we get there
- 01
Map where card data travels today and which systems truly need to see it.
- 02
Keep card data out of everything else with tokenization, so compliance scope stays small by design.
- 03
Wire fraud signals and monitoring into the transaction path.
- 04
Ship each change behind tests and review that treat every payment path as critical.
Experience you can inspect
Similar challenges.
Concrete outcomes.
Earlier work that informs how I approach this service. Each engagement has its own scope.
Before we start
A few useful answers.
Bring the current or planned payment flow and provider. We’ll trace where data travels, what needs to change, and which paths need protection.
More about working together ↗Has Aternex built a payment gateway before?
Yes. I built a PCI-compliant payment gateway from scratch as employee number seven at Ministry Brands. By my account, with no public source, it grew to process $15B+ a year across 90+ brands, and it was spun out as its own company.
How does tokenization shrink compliance scope?
Card numbers are swapped for tokens as early as possible, so only the systems that truly need card data ever hold it. On that gateway, tokenization per brand kept each acquired brand out of its parent's compliance scope.
Does Aternex handle fraud?
Yes. By my own account from an earlier role, with no proof page, real-time fraud analytics put the risk on monitored attack vectors 96.7% below average and cut fraud damages by 60%.