No PII storage
User identity is an opaque token you generate. MBO Rewards cannot reverse-map it. No names, emails, or device identifiers enter our systems.
Anonymised tracking
All click and conversion tracking operates on anonymised tokens. Compliance-ready for regulated financial platforms.
Encrypted communication
All API traffic encrypted with TLS 1.3. Older protocol versions are rejected at the load balancer. Certificate pinning available for mobile SDKs.
Secure authentication
API keys hashed server-side — plaintext is shown once at creation. Key rotation is self-service. RBAC for dashboard access.
Server-side tracking
No client-side scripts, no cookies, no browser fingerprinting. Attribution tokens generated and validated entirely on MBO servers.
Reliable attribution
Every click validated at attribution time. Device fingerprint, velocity rules, and behavioural anomalies checked before commission is confirmed.
Client-level separation
Click, conversion, and commission data is partitioned per platform at the data layer. Enforced by architecture.
No cross-data sharing
No campaign or conversion data is shared across platforms. Tenant isolation is absolute.
Infrastructure
Designed for high-volume fintech and banking platforms globally. Built to meet the data handling and compliance requirements of regulated financial institutions across India, GCC, SEA, and the UK.
Need a security review pack?
Architecture diagrams, data flow maps, and a DPA template — available for regulated platform onboarding.
Get API Access