Trustly API calls are secured by cryptographic signatures included in all request payloads and event notifications. Request signatures are required for production API requests and SDK operations. Additionally, Trustly recommends that applications verify the signatures included in redirect notifications from Trustly UI SDKs and incoming webhook notifications.
Learn how to create the cryptographic signatures required for all production API requests and SDK operations.
Verify the signature included in redirect notifications from Trustly UI SDKs to ensure data integrity upon return.
Implement signature verification for all incoming webhook notifications to confirm their authenticity and data validity.
Detailed guide on using encryption keys to secure sensitive field values within your request payload.