Keep customers engaged with rewards you don't fund
Embed Saldo's white-label widget, post transactions to one webhook, and deliver merchant-funded rewards your customers redeem in your app — whether they pay by card, PIX or wallet. No PII leaves your perimeter — only tokens cross the wire.
Integration
Three calls, no PII
The whole integration is widget + webhook + callback. Your customer data stays inside your perimeter.
Embed the widget
Drop our iframe or call the headless API. White-label by default — your colors, your branding, no Saldo references visible to cardholders.
Post transactions
Send transaction events to /api/v1/transactions as they happen. HMAC-signed, tokenized, idempotent. Match latency in seconds.
Credit the cardholder
Receive a redemption callback. Apply the cashback in your own systems on your own ledger. We never touch the customer balance.
Why institutions pick Saldo
Designed around your compliance posture
PII never crosses the boundary
We operate on the cardholder_token + card_token your institution generates. No names, emails, card numbers, or any other PII.
Curated offer catalog
Browse offers from real merchants in real categories. Approve what fits your program — reject anything that doesn't.
Tokenized end-to-end
HMAC-signed webhooks, hashed API keys, configurable rotation. Built around the assumption that we can be audited at any moment.
Configurable per program
Sort order, max offers displayed, eligibility windows, MCC restrictions — every knob is in your dashboard, not a support ticket.
Trust & security
Built for bank security from day one
The architecture keeps you outside PII and PCI scope — and gives your security team the controls they expect.
Tokenized architecture
We store only the cardholder_token + card_token you generate — never names, emails, PANs, or government IDs.
Minimal PCI & PII scope
Because Saldo never touches real card numbers, your PCI scope stays minimal and Saldo isn't a PII processor under GDPR, CCPA or LFPDPPP.
HMAC-signed webhooks
Every transaction event and API call is verified with HMAC signatures and timing-safe comparison.
Hashed, rotatable API keys
Per-institution keys are hashed at rest and scoped to your data — a key can never read another institution's.
Strict tenant isolation
Every record is scoped by institution_id; one institution's cardholder data is never exposed to another.
Full audit logging
Administrative actions are recorded — who changed what, and when — for compliance and review.
Pricing
Tiered network access
Plus the per-redemption payout you keep on every settled offer.
Community Banks
Small banks and credit unions getting started
- ✓Full offer catalog access
- ✓Real-time webhook matching
- ✓Standard widget themes
- ✓Email support
Regional Banks
Mid-size programs ready for advanced features
- ✓Everything in Community Banks
- ✓Advanced analytics dashboard
- ✓Custom widget branding
- ✓Priority support + Slack channel
Enterprise Programs
Large institutions with bespoke needs
- ✓Everything in Regional Banks
- ✓Dedicated account team
- ✓Custom take-rate negotiation
- ✓SLA + uptime guarantees
FAQ
Institution FAQ
Ready to plug in?
We can have you live with a sandbox key and a working widget embed in under a week. Talk to our team.