WalletPassBuilder

WalletPassBuilder is a SaaS platform that lets any business create, issue, and manage digital wallet passes for Apple Wallet and Google Wallet — loyalty cards, event tickets, and membership passes — without building native mobile apps. Customers design passes visually, enroll and manage end users, trigger customer-facing automations (push notifications, SMS/WhatsApp via Twilio, email via Resend), and integrate via a documented REST API secured with per-account API keys.

Passes are cryptographically signed per Apple's PKCS#7 spec and delivered via short-lived signed URLs. The platform offers team/workspace management with role-based access control, and US/EU data-residency options that route each workspace to a dedicated regional MongoDB Atlas cluster and Cloud Storage bucket.

Security controls include TLS 1.2/1.3 in transit, AES-256 encryption at rest, scrypt-hashed passwords, TOTP multi-factor authentication, hashed session tokens and API keys, and a daily automated dependency vulnerability scan (Snyk) with alerting on critical/high findings. Infrastructure runs on Google Cloud behind Cloudflare (WAF/CDN/DDoS protection), with zero-downtime blue/green deployments.

WalletPassBuilder supports GDPR/CCPA self-service data export and account deletion, and publishes its full compliance posture, security controls, and subprocessor list at walletpassbuilder.com/trustcenter.