Tax-ready compliance & security

How Aflink handles global tax via Merchant of Record, verifies payees with KYC, and keeps your secrets encrypted.

ArticleFor everyone3 min read

Running a global creator program usually means wrestling with tax and identity rules. Aflink leans on Merchant-of-Record rails and security-by-default so most of that load isn't yours.

  • With Fungies as Merchant of Record, VAT, GST, and sales tax are calculated and remitted on the sale.
  • Stripe Connect runs KYC and identity verification at onboarding, so every payee is verified.
  • Provider API keys and webhook secrets live encrypted in Supabase Vault — only an opaque reference touches the database.
  • Low-entropy PII like IP addresses is salted per workspace and one-way hashed.
Provider connections screen showing encrypted key storage
Keys are stored encrypted — Aflink never exposes them to the browser.

Still need a hand?

Book a quick walkthrough with our team, or jump straight in — it's free for your first five creators.