A PCI DSS aligned gateway for every Tanzanian rail.
One REST API, one webhook signature, one reconciliation file — across mobile money, bank transfer and international cards. Tokenised by default; cardholder data never touches your servers.
What you get
PCI DSS Level 1 architecture
End-to-end tokenisation with HSM-backed key management. We carry the scope so you don’t have to.
3-D Secure 2.x
Frictionless authentication for low-risk transactions; step-up only when needed.
Hosted & embedded checkout
Drop-in hosted checkout, embedded iframe, or fully headless via the API — your choice.
Webhooks you can trust
Signed, retried, idempotent. Every payment lifecycle event delivered exactly once.
Sandbox parity
A sandbox that mirrors production behaviour, including failure modes and 3DS challenges.
SDKs for the languages you ship
Server SDKs for Node, Python, PHP, Go, Java; mobile SDKs for iOS and Android.
From integration to settlement
- Step 1
Onboard
Complete merchant KYB, sign your contracts, and receive sandbox keys within minutes.
- Step 2
Integrate
Drop in our checkout or call the API directly. Test against the sandbox until you're happy.
- Step 3
Go live
We rotate you to production keys; your first transactions settle T+1 to your nominated account.
- Step 4
Operate
Monitor, refund, dispute and reconcile from the merchant dashboard or via API.
A few lines to live.
curl https://api.payluna.tech/v1/charges \
-H "Authorization: Bearer sk_live_***" \
-H "Idempotency-Key: 9f1c-..." \
-d amount=125000 \
-d currency=TZS \
-d source[type]=card \
-d source[token]=tok_visa_4242 \
-d three_d_secure[enabled]=true