STAR Registry Listing for
PaymentHood
PaymentHood
PaymentHood is a payment orchestration platform delivered as SaaS by OmegaHood LLC.
One API and one hosted checkout replace a separate integration per payment provider. A single connection reaches 36 providers across Africa, MENA, Asia, Europe and the Americas — cards, bank transfers, mobile money, wallets and cryptocurrency — with routing, retries, refunds and reconciliation handled centrally. Plugins cover WooCommerce, WHMCS, VirtueMart, HikaShop, J2Commerce and Phoca Cart, and every account includes a sandbox isolated from live data.
Security model- Data minimisation. Card details pass directly from the shopper to the merchant's chosen provider. PaymentHood orchestrates using provider-issued tokens alone, so adding PaymentHood introduces no cardholder data into the merchant's environment.
- Encryption. Provider credentials are sealed at rest with AES-256-GCM and decrypted only for the moment an outbound call is made. All traffic is TLS.
- Tenant isolation. Authorization is checked server-side on every request against the calling application and merchant scope.
- Verifiable events. Every webhook is signed with HMAC-SHA256 and timestamped.
- Auditability. The full payment lifecycle, every gateway interaction and every webhook delivery attempt is recorded.
Hosted on Microsoft Azure. Our shared security responsibility model is published at https://www.paymenthood.com/trust-center/shared-responsibility/

Listed Since: 08/08/2026
STAR Level 1

CAIQ Self-assessment v4.0.3
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Created or renewed 1 day ago, on August 08, 2026.