Payment Security

How Taloflow processes payments and protects payment details.

Scope

This page covers payment processing and what Taloflow does (and does not) store.

For application security controls, see Security Overview.

Payment processor

Taloflow uses Stripe to process payments.

Payment card details are handled by Stripe.

Taloflow does not store raw card numbers.

Taloflow receives Stripe identifiers and non-sensitive card metadata.

Stripe stores and processes the underlying payment credentials.

Stripe security (high level)

Stripe is designed to reduce the amount of sensitive payment data merchants handle.

Stripe publishes security and compliance information in their documentation.

See https://stripe.com/docs/security.

What Taloflow stores

Taloflow stores only the billing metadata needed to manage your account.

This can include:

• Stripe customer and subscription identifiers

• Payment method identifiers (tokens) and non-sensitive card metadata (for example, brand and last 4 digits)

• Invoice and transaction status

Questions and customer requests

If you need vendor documentation for a security review, send your request via the Support Hub.

For Stripe’s own security and compliance information, see Stripe’s documentation.