SlipBolt Security

Protecting your money
and your customers' privacy

PDPA-first design · all data encrypted in transit · slip images deleted within 60 seconds · audit log for every event

6 security pillars

Designed to be secure from day one

Encrypted in transit

Everything sent between your browser, LINE and our system is encrypted (HTTPS), with protection against flooding attacks.

A+
SSL Labs Rating

Slip auto-purge in 60s

Customer slip images are deleted within 60 seconds after verification — only the required text data is retained.

60s
Max retention

Safer sign-in

Sign-in credentials are kept where injected page scripts cannot read them, and are renewed automatically every 7 days.

7d
Token rotation

Duplicate-slip guard

The reference of every slip is remembered — recycled or duplicate slips are caught in a split second.

99.99%
Dedup accuracy

Request limits

Per-shop request limits stop abuse and password guessing.

60/m
Default limit

Audit log for every event

Every action in the Dashboard and API is recorded with actor / IP / timestamp — downloadable as CSV.

90d
Retention
Slip anatomy

We don't check whether the picture looks right

There is more in a slip than the eye reads. These are the four things SlipBolt checks every time — pick one to see where it lives.

Transfer complete
Bank · PromptPay
2
฿1,290.00
Into account xxx-3-91247-x
3
Transaction time
14:32:07.418
4
Reference
0192B5TQX2H7
1
QR DATA
00020101021229…6304
Demo
Right amount, right account, reused reference — bounced before it counts as a sale.
Data Flow

Follow a single slip
through the entire system

See exactly where your customers' data travels — and where it gets deleted.

Customer sends a slip
in your LINE OA chat
SlipBolt
encrypted verify + confirm
Bank network
checked with the bank in real time
Database
text data only (reference, amount, time)
Duplicate guard
remembers used slips
Result card
reply in LINE + Dashboard
Original slip image → deleted
Deleted automatically within 60 seconds of verification · only the reference, amount and time remain
Compliance & Standards

Standards we
actually follow and what we plan next

PDPA Compliant

Thailand's Personal Data Protection Act B.E. 2562

Per-shop data isolation

Every record is scoped to your shop — no cross-shop access

ISO 27001 (planned)

Information Security Management — certification targeted for Q2 2027

PCI DSS

Cards are paid through Stripe (PCI DSS Level 1) — SlipBolt never sees or stores card numbers

Your rights under PDPA

Your data,
under your control

Under Thailand's Personal Data Protection Act (PDPA) you always have rights over your data — SlipBolt is designed so you can exercise them directly from the Dashboard in a few clicks.

  • 1
    Right of Access
    View / export all the data we hold about you, anytime
  • 2
    Right to Rectification
    Fix incorrect data instantly via the Dashboard
  • 3
    Right to Erasure
    Delete your account + all data in 1 click, completed within 24h
  • 4
    Right to Object
    Opt out of certain data processing

Manage your data

Go to Dashboard → Settings → Privacy
Export all data (JSON / CSV)
View account audit log
Data processing preferences
Delete account and all data
Contact our Data Protection Officer:
[email protected]