Skip to main content

​
Encryption

The switching service supports end-to-end payload encryption using JWE. Use it when you want the switch to protect request bodies and webhook payloads in transit at the application layer.

​
What is encrypted

  • Inbound request bodies
  • Outbound webhook payloads

​
Key model

Each application receives an EC P-256 keypair. The switch uses the public key to encrypt payloads for your application. You decrypt payloads with your private key. Enable encryption when your integration handles sensitive payment metadata or customer data. Make sure your webhook handler can decrypt payloads before validation.