How We Secured Payment Details in PDP
We introduced PGP encryption for payment details in the apartment booking system in PDP: the data is encrypted before it is written to the database and decrypted only when generating the payment link.
In PDP, we introduced PGP encryption of payment details in the apartment booking system. The logic is simple, but effective: we encrypt the data at the application layer before writing it to the database, and decrypt it only when generating the payment link.
Why this approach? Because in 2025, storing financial data “just in the database” is basically an antipattern. Even if someone gets access to the database, they won’t see the payment details — only crypto mush 👀
But we didn’t stop at a single layer: together with PostgreSQL TDE for the users table and encryption of TOTP secrets, we got multi-layer protection for financial data. A kind of defense in depth, just without the extra hype.
The result: fewer risks, better sleep, and users don’t even notice how much magic is happening under the hood.