NEW Buy the gateway outright — financing available
Stop renting your rails. SurePay is a full payment gateway — sold to ISOs and ISVs as an asset you own outright, with the source code, the merchants and 100% of the recurring revenue.
Certified & connected
We sell you one. Same merchants, same processors — a fundamentally different position on your balance sheet.
The usual deal
The SurePay deal
Merchant counts, processing volume and customer references are available under NDA on a scoping call.
Native iOS and Android from one Flutter codebase. Card, ACH and paper cheques — captured anywhere the merchant works.
PAX, Dejavoo and Valor hardware running a native SurePay application — with the disclosure built into the flow.
Every ISO, sub-ISO, merchant and device in one hierarchy — with card and ACH activity side by side.
Live demo — click the sidebar and filters
Carter Flooring · MPA 0018 · Today
Card present, e-commerce, MOTO, invoicing, mobile and recurring — under one merchant record.
The core every other surface calls. Tokenization, routing, settlement and webhooks — documented in Swagger with working code samples, OAuth 2 and browser-side payment tokens.
Read the developer docsEmail or SMS delivery, auto reminders, stored customers, scheduled charges.
Full ACH via Paya/Nuvei with real-time account validation, plus Check 21.
Drop-in checkout and pay-by-text that keep card data off merchant systems.
AVS, CVV2, Kount screening, 3DS via PAAY and BIN blocking by class or entry method.
Pricing programs are how your merchants compete. All three run card-present and card-not-present.
A fee added to credit transactions, with BIN validation so it never lands on a debit card.
A lower posted price for cash. Runs on terminals, hosted pages and invoices.
Card price and cash price shown side by side, so the choice sits with the cardholder.
Whichever program runs, the fee and any tip are itemized on screen before the cardholder confirms.
Route each merchant to the platform that fits, rather than locking the whole portfolio to one.
It matters what the source code is.
Two layers: protecting the platform you now own, and protecting the merchants running on it.
Platform security
Merchant fraud protection
PCI Level 1 compliant. Kount and PAAY require their own agreements; Apple Pay, Google Pay and Account Updater require card-brand registration.
If yours is not here, ask it on the scoping call — or email it and we will answer in writing.
A license to the SurePay gateway with the source code, deployed on infrastructure you control. Not a reseller agreement and not an API key against someone else's platform — the merchants, the data and the recurring revenue sit with you.
The gateway is purchased outright, with terms sized for an ISO or ISV balance sheet rather than an enterprise one. Exact structure depends on portfolio size, so it is covered on the scoping call rather than published here.
No. SurePay is certified on TransIT, Omaha/North and Paya/Nuvei, and the choice is made per merchant. Most portfolios keep their existing processing relationships and change only the gateway underneath.
You do, on the Azure reference architecture we ship — multi-region, geo-replicated, WAF at the edge. If you would rather not staff for it, monitoring and maintenance is available as an optional service.
The platform is PCI Level 1 compliant. Hosted payment pages, payment buttons and browser-side tokenization keep card data off your merchants' systems, which is what keeps their scope small.
Yes, end to end — the portal, hosted pages, payment buttons, invoices and both mobile apps, including the support details a merchant sees inside the app.
It depends on portfolio size and how many terminals are in the field. The scoping call produces a real sequence: sandbox, pilot merchants, then estate migration in waves.
The TSYS Sierra processing platform, targeted Q4 2026. Beyond that, the roadmap becomes yours — you own the source.
A scoping call covers your portfolio, processor mix and pricing programs. You leave knowing what ownership would cost you.