Our team of Bacs experts are here to help
Contact us to book a demo, take a closer look at our platform and get all the answers you need.
HSM offers a highly secure, tamper-proof method of signing your files, keeping you compliant with regulations and enhancing the security of remote payment processing.
HSM is the most secure method of submitting payment data to Bacs.
HSMs use encryption to protect sensitive data and works like a card chip and pin. Unlike smartcards, which can be lost or physically compromised, HSM ensures your payment data is protected at all times.
Protection for your payment data regardless of the location or device.
Go that extra mile to safeguard both internal and external data
Add simple workflows to automate a variety of payment processes
Hosted on your behalf, available when and where you need it, with no delays
Secure authentication and access to resources from any location
Achieve time and operational efficiency with workflows for routine tasks
“Our previous HSM was located in a data centre in Belfast and we were now looking to transition to a hosted solution. This change also presented an opportunity to enhance efficiency in the future. The move was very smooth”
John Smith, Systems Development Accountant
HSM unlocks the potential for automation of part or all of your processes, delivering efficiencies in time and resources.
Check out popular automation options in this short video.
Cloud-based HSM-as-a-service comes with all the security features of a physical HSM but with the added benefits of remote access, greater flexibility and easier management.
Plus, Multi-Factor Authentication (MFA) provides an extra layer of security.
In order to use HSM for your Bacs submission, you will need to obtain an HSM certificate from your sponsoring bank. This is stored on the HSM. Once connected to your Bacs approved software, it allows you to sign payment submissions simply, securely and without the need for any smartcards
Secondary certificate? Absolutely! A secondary HSM certificate provides a safety net should your first certificate expire before you’ve renewed it. Find out more in our HSM guide.
Obtain an HSM application form from your sponsoring bank
The bank will then request a Certificate Signing Request (CSR), generated by our technician
On receipt of the CSR, the bank issues your certificate(s). Our technician loads these into the HSM and completes the required Service Qualification Plan. You're ready to submit via HSM!
We’re always on hand to answer any questions and give advice. Click the button below to reach out.
HSM (Hardware Security Module) signing is a method of securing payment files using a tamper-proof physical device that generates and stores cryptographic keys, ensuring payment data is authenticated and protected from fraud or tampering during transmission.
HSM signing protects Bacs payments by using a secure physical device to digitally sign payment files with encrypted cryptographic keys, ensuring they are authenticated and have not been altered before reaching the Bacs processing system.
If using a bureau service, the bureau handles submission approvals, and you typically do not need your own SUN.
HSM signing is important for financial compliance as it provides a tamper-proof audit trail, ensures payment files meet strict authentication standards, and demonstrates that sensitive data is handled securely in line with industry regulations.
HSM signing secures payment files by using a dedicated hardware device to digitally sign and encrypt them, ensuring they are genuine and cannot be altered or intercepted before they are processed.
Businesses that submit Bacs payments directly, including large employers, financial institutions, and payment bureaus, typically require HSM signing to meet the strict authentication and security standards set by the Bacs scheme.
Contact us to book a demo, take a closer look at our platform and get all the answers you need.
✓
| paygate on prem | paygate v2 | paygate v3 | |
|---|---|---|---|
Security policy manager * Includes: password complexity manager, inactive timeout, time restrictions, IP address restrictions | ✓ | ✓ | ✓ |
AWS ISO27001 hosted * Primary fail over and back up UK data centres | ✓ | ✓ | |
SFTP file uploads/downloads *Secure way to move files across the internet, customers can use their own certificates | ✓ | ✓ | ✓ |
| Gemalto security tokens MFA | ✓ | ✓ | ✓ |
| Email MFA | ✓ | ||
| SMS MFA | ✓ | ✓ | ✓ |
APP MFA * Works with common auth apps such as Google Authenticator, Authy. Works on Android or iOS. | ✓ | ||
| PG Platform ISO27001 | ✓ | ||
Fraud tool *Currently support Blacklists and Whitelists. In a blacklist you add various sortcodes / account numbers and the system will prevent any payment to those accounts. In a whitelist you add sortcodes and account numbers and the system will ONLY allow payments to accounts on the whitelist. We include various tools to help build and maintain the lists. | ✓ | ||
GDPR subject access request * Search tools to help perform a GDRP lookup. Then can optionally ‘sanitise’ personal data from the system. | ✓ | ✓ | ✓ |
GDPR Data cleansing *Remove historical data by bulk or individual. | ✓ | ||
Browser compatbility * We maintain support for Chrome, Edge and Firefox. | ✓ | ||
Built for performance * Version 3 runs on super modern, high-end infrastructure | ✓ | ||
Single Platform * Customers have a single user account that they can use across all services (Enterprise, Online, Validate, etc). | ✓ | ||
Agent rebuilt key management system * Very secure way to get files to and from the Paygate cloud. Supports ways to automate files being sent into the paygate cloud and retrieving reports from the cloud. Key management was rebuilt for V3 to further increase security. | ✓ | ||
HTTPS uploads/downloads * paygate v3 supports both SFTP and HTTPS. | ✓ | ||
In browser File and Folder handling * Allows customers to securely organise their files and folders that are stored on paygate | ✓ |
| PG on prem | PG Ev2 | PGv3 | |
|---|---|---|---|
| Logging tickets by email | ✓ | ✓ | ✓ |
| Logging tickets by portal | ✓ | ||
| Logging tickets by phone | ✓ | ✓ | ✓ |
| Dedicated account management | ✓ | ✓ | ✓ |
| Uptime improvements | ✓ | ||
| Ongoing development | ✓ | ||
| Bug fixing | ✓ | ||
|
Auto File Import *Automatically imports a payment file and validates it. Users no longer need to manually browse for and import a file, paygate will do this in the background and present the validation results to the user. |
✓ |
| PG on prem | PG Ev2 | PGv3 | |
|---|---|---|---|
|
Designer in browser * In V2 Workflows use an older style desktop app. In V3 workflows are built and managed in the Paygate Browser app. It’s much easier to deploy and manage. |
✓ | ||
| Designer 3rd party app | ✓ | ✓ | |
|
Improved logging * A feature mainly for PS/CS to help them diagnose problems with workflows. Problems can be diagnosed and fixed faster. |
✓ | ||
|
New scheduler triggers * A new trigger type that allows the user to set up a workflow like you set up a meeting in Outlook. For some, this is more flexible and easier to understand than using CRON. |
✓ | ||
|
Triggers for multiple workflows * You can use a single trigger to start multiple workflows. It’s a simple feature that will make things easier to manage if you have a lot of workflows. |
✓ | ||
|
Workflow validation * Troubleshoots new workflows, validation |
✓ | ||
|
Workflow chaining * Allows a workflow to call another workflow. Using this you can simplify large complicated workflows in smaller separate ones. Easier to manage and diagnose issues. |
✓ | ||
|
New nodes * Various new nodes that help to build new types of workflows or help manage existing workflows. |
✓ | ||
|
Full documentation V3 will be fully documented with help guides and tutorials.
and tutorials * |
✓ | ||
|
Multiple filename variables * Supporting multiple filename variables should make designing complex workflows a bit easier. |
✓ | ||
|
Future developments * Pure Excel Importer – XLSX; BACS Calendar Widget; Workflow Timeline; Workflow / Mobile App notification / management; S3 Connector |
✓ | ||
|
Download and distribute A Reports * When you have workflow and HSM you can automate the entire BACS report download process. They can automatically be converted to other formats for integration into finance apps. They can be emailed to customers as html, pdf or zips. They can be made available for collection via SFTP. Or, if you use Agent, they can be security delivered to the customer’s private network. |
✓ | ✓ | ✓ |
| Partial submission | ✓ | ✓ | ✓ |
|
Lightsout submission * No signing |
✓ | ✓ | ✓ |
| Standard nodes for initiation | ✓ | ✓ | ✓ |
| PG on prem | PG Ev2 | PGv3 | |
|---|---|---|---|
| Batched bureau submissions | ✓ | ✓ | ✓ |
| Manual & Automated submission builder | ✓ | ✓ | ✓ |
| Customer import | ✓ | ✓ | ✓ |
| Bacs reporting tools | ✓ | ✓ | ✓ |
| Recall Bureau Customers by ID | ✓ | ||
|
Submission Re-entry * Complete your submissions over any amount of time
|
✓ | ||
|
Familiar workflow throughout *It will be familiar to V2 customer but they will notice improvements. |
✓ | ||
| Revamped manual submission mode *This is completely new in V3 Bureau.
Those customers wanting a more manual way of building their submission (Rather than using Jobs) will find a new, efficient way of working.
|
✓ | ||
|
Drag and drop files from anywhere *Like in other areas of V3. User can just drag and drop file in Bureau for processing. They can also use the Restricted File Browser and Server file browser – that add more security – if they wish. |
✓ | ||
|
Support for multiple file formats per submission * No longer limited to single Standard 18 submission for example
|
✓ | ||
|
Better default filename support *Makes working with files easier. |
✓ | ||
|
Usage Reporting over data range *Small but useful improvement to reporting. User can set a date range on the usage report. |
✓ |
| PG on prem | PG Ev2 | PGv3 | |
|---|---|---|---|
|
Validate *Validate is integrated in V3 and so customers that have both products can access them from the same client with the same account. |
✓ | ||
|
API Access *Validate API and the Payment API.
|
✓ | ||
| 4x Faster | ✓ | ||
|
Save Submissions *Save an ‘in-progress’ submission and return to it later. Build up a submission during the day |
✓ | ||
| Improved payment and submission searching | ✓ | ||
|
Customisable dashboard *Many useful, module specific, dashboard widgets, e.g. Payments, collections, workflow, etc. |
✓ |
| PG on prem | PG Ev2 | PGv3 | |
|---|---|---|---|
| Enhanced reporting including real-time usage | ✓ |