WePayGuardSecurity & trust
The rules are enforced on our servers, not in the app.
Money and transaction state can only change through our backend, under explicit rules. The app on your phone asks; it never decides.
Backend-authoritative
Clients cannot directly modify transactions, escrow, disputes or audit records. Every state change is validated server-side against an explicit state machine.
Append-only audit
Important actions and money decisions emit audit events that cannot be edited or removed by either party.
Idempotent money operations
Payment, acceptance, cancellation and resolution requests carry an idempotency key, so a retry or a duplicate provider event cannot move money twice.
Scoped access
Database and storage rules restrict transactions and evidence to the two parties involved, and are verified against the deployed configuration before release.
Google infrastructure
Authentication, database, file storage and the backend run on Firebase and Google Cloud. Development authentication shortcuts are disabled in production builds.
Operational controls
Money-movement holds, a manual pause, and an audited emergency decision path exist for the cases automation should not settle alone.
Before real money moves
The app currently runs on a test payment provider. Real customer funds will not move until the production payment integration is connected and verified — signed webhooks checked against the provider's exact request bytes, duplicate and out-of-order events proven harmless, real refunds and payouts executed, funding and fees reconciled against the provider's own records, and a pause and rollback procedure rehearsed. That work ends in a written go/no-go approval.
What we don't claim
- WePayGuard is not a bank and offers no banking, lending or insurance services.
- Held funds are not insured deposits.
- We do not verify the condition, authenticity or legality of anything being sold.
Reporting a security issue
Email security@wepayguard.com with steps to reproduce. Please give us a reasonable window to fix an issue before disclosing it publicly.
WePayGuard is in private beta on Android.