Paranoid
by design.
The principles we follow to protect your payments, your account and your personal data — written plainly, applied on every single payment.
Strong authentication
Compliant with European requirements for payment services, on every sensitive operation.
Explicit confirmation
Every payment is confirmed by the user. Unconfirmed transfers never leave.
European hosting
Architecture and data processed in Europe, in accordance with the GDPR.
Nine rules.
Applied to the letter.
Simple, verifiable, upheld on every payment and every piece of data.
Every account is tied to an enrolled device and strong authentication. Any sensitive change requires a fresh confirmation.
Strong authentication compliant with European requirements. Methods documented as the licence progresses.
Every operation is explicitly confirmed by the user. Unconfirmed transfers never leave.
Data processed for the sole purpose of providing the service. No reselling, no advertising use.
Personal data processed in accordance with the GDPR. Access, rectification and erasure described in the privacy policy.
Architecture designed for resilience and observability. Technical details published as they are validated.
Automated detection and human review on sensitive operations. Mechanisms refined continuously.
A flaw, suspicious behaviour, a doubt? Contact the security team.
NexEuro is seeking a payment-institution licence from the competent authority. The exact status is set out in the legal notice.
A licence application in progress.
NexEuro is preparing a payment-institution licence application with the competent authority (ACPR). Until the licence is obtained, it is neither presented nor used as such. The official wording is set out in the legal notice.
Read the fine print.
We wrote it to be read.
Found a flaw? Tell us first.
Spotted suspicious behaviour or a vulnerability? Our security team replies fast — and thanks you properly.