Public sandbox data
Submitted transaction descriptions are logged. Use synthetic or redacted strings only. Do not send account numbers, personal identifiers or confidential customer information.
Resources
Security & Data Considerations
A transparent starting point for institutional evaluation.
Agree sample safeguards first
Before sharing institutional data, agree permitted fields, access, retention and deletion in writing. Do not assume the public sandbox is approved for customer statement data.
Discuss a controlled evaluationCurrent access boundaries
The website’s merchant administration requires sign-in and admin access. The public developer API uses test keys. Those controls are not evidence of a completed institution-level security assessment.
Production review is separate
Data residency, operating controls, performance, deployment options and regulatory/vendor obligations must be reviewed for the intended use. Private VPC deployment, immutable audit trails and authorisation-path readiness are not claimed.
No certification claim
Tanzim does not claim SOC 2, ISO 27001 or PCI DSS certification, or SBP approval. Future security work is not a certification or delivery promise.