Security at ZendoRemit

We aim to minimise sensitive data, validate inputs, separate internal services from public interfaces and use secure defaults throughout the application.

Provider credentials and other secrets should remain on trusted server-side infrastructure rather than being exposed to the browser.

ZendoRemit currently acts as a comparison and discovery service and does not hold customer transfer funds.

Users are redirected to the selected provider to complete onboarding, identity verification and payment directly with that provider.

Our architecture is designed so that infrastructure providers can evolve over time while core application logic remains separated from individual vendors.

If you believe you have found a security issue affecting ZendoRemit, please contact us and include enough information for us to investigate the issue.