Tax-ready compliance & security
How Aflink handles global tax via Merchant of Record, verifies payees with KYC, and keeps your secrets encrypted.
ArticleFor everyone3 min read
Running a global creator program usually means wrestling with tax and identity rules. Aflink leans on Merchant-of-Record rails and security-by-default so most of that load isn't yours.
- With Fungies as Merchant of Record, VAT, GST, and sales tax are calculated and remitted on the sale.
- Stripe Connect runs KYC and identity verification at onboarding, so every payee is verified.
- Provider API keys and webhook secrets live encrypted in Supabase Vault — only an opaque reference touches the database.
- Low-entropy PII like IP addresses is salted per workspace and one-way hashed.
