Your card data never touches our servers
The card form you fill in is rendered directly by Tap Payments inside our app. Your 16-digit card number, expiry, and CVV are encrypted and sent straight to Tap — GoOrder never sees or stores them.
What is PCI-DSS?
PCI-DSS (Payment Card Industry Data Security Standard) is the global security standard for card payments. Level 1 is the highest certification, required for organisations processing millions of transactions annually.
3D Secure authentication
High-risk transactions are flagged for 3D Secure — a second factor of authentication via your bank's app or an SMS code. This protects you even if your card details were somehow compromised.
Save card with full protection
When you save a card, only a token (not the actual card number) is stored. Tap holds the real data in their vaulted infrastructure; we simply reference the token for future charges.
