Private beta
Card acceptance, cardholder verification, card activation, step up authentication, network tokens and card present confirmation, inside your own app. The action is the same every time, a tap of the physical card.
One SDK on iOS and Android. Certified on TSYS, Elavon, Fiserv and Worldpay.
One integration
Because it is the same tap and the same SDK. The contactless read, the cryptogram and the network validation are identical work. What changes is who asks for the result and what they do with it. A partner that integrates Koard once for acceptance has already done the engineering for verification, and the reverse is equally true.
Surface one
Runs on iOS and Android
The merchant’s phone, acting as the terminal. No hardware to buy, ship, key, repair or collect. A merchant who needs a second or a third terminal adds one on a phone they already carry, and one phone can carry several terminals.
Tap to Pay on Phone and Tap to Token.
Surface two
Runs on Android
The customer’s own phone. The card is already in the customer’s hand, so nothing new has to be issued, downloaded or remembered. The card is read through a certified contactless kernel, the cryptogram is validated by the network, and the result comes back to your own app for your own decision.
Tap to Add Card, Tap to Verify, Tap to Activate, Tap to Authenticate and Tap to Confirm.
The products
Seven moments where a card is in someone’s hand. Each one starts with the same tap.
02
A customer adds a card without typing it
A cardholder taps their card against their own phone to add it to an app, a wallet, a checkout or a file on record. No typing, no camera, no expiration date, no security code.
Cardholder Device · Merchant or Issuer · Android
03
One amount, one transaction, one authorization
A specific card not present authorization lands on the account and the cardholder settles that one authorization by tapping the physical card against their own phone inside the issuer’s app. It replaces the one time passcode and the call from the fraud desk.
Cardholder Device · Issuer · Android
04
A new or replacement card arrives
A new or replacement card is activated by tapping it against the cardholder’s own phone, inside the issuer’s app, in a few seconds. It replaces the activation phone line, and the cards that are never activated at all.
Cardholder Device · Issuer · Android
05
Any high risk behavior needs a person
A tap used for any high risk behavior rather than to take a payment. Enrolling, signing in on a new device, recovering an account, changing a password, changing where money is sent, deleting an account, or giving an AI agent a standing permission. No amount and no transaction behind it. It replaces the one time passcode and everything that can be socially engineered around it.
Cardholder Device · Issuer or Merchant · Android
06
A payment that should also put a card on file
A customer taps once to pay at the counter, and the merchant ends that transaction holding a stable network token of its own, good for recurring billing, card on file and online. The next transaction does not need the card again.
Terminal · Merchant · iOS and Android
07
A purchase that needs proof the card is in hand
A tap that proves the physical card is present and in the cardholder’s hand, bound to one transaction, one amount, one merchant, one authorization. An unusually large order or a payout is released knowing the card was present. The merchant learns nothing else, and no card number is returned.
Cardholder Device · Merchant · Android
A one time passcode proves somebody controls a phone number. A tap proves somebody is holding the physical card, because the chip produces a cryptogram the network validates and a stolen card number cannot produce.
In the age of AI, proof of physical possession will be a requirement.
The demo
Merchant and cardholder flows, screen by screen. Tap the phone to advance.
Tap the phone to advance. Arrow keys work too. Red markers are failure states.
Screen
1 / 6
Tap to Token — Merchant — Terminal — iOS and Android
A customer taps once to pay at the counter, and the merchant ends that transaction holding a stable network token of its own, good for recurring billing, card on file and online.
What Koard holds
EMV Level 2 kernel and Level 3 host certification across TSYS, Elavon, Fiserv and Worldpay, on iOS and Android. We hold the certifications, and we maintain and renew them as specifications move.
4
Acquiring platforms certified
2
Mobile platforms
6
Tap to products
1
Integration
Acquirer certification is the longest single item in a Tap to Pay on iPhone plan, and it repeats for every platform you want to reach. With it already done, your launch moves forward by quarters.
| Acquiring platform | What Koard carries |
|---|---|
| TSYS | EMV Level 2 kernel and Level 3 host, with PIN |
| Fiserv | EMV Level 2 kernel and Level 3 host, with PIN |
| Worldpay | EMV Level 2 kernel and Level 3 host, with PIN |
| Elavon | EMV Level 2 kernel and Level 3 host |
PCI DSS
PCI PINApple Global Service Provider and Payment Service ProviderKoard operates the token requestor on behalf of, as a service. Your merchants and your cardholders stay yours.
Who this is for
Banks and platforms
Card acceptance inside the business banking app for your own small business customers. Cardholder verification, card activation and step up authentication inside the mobile banking app. A digital banking platform integrates once and every institution on it can turn the products on, sold under the platform’s own name.
Replaces terminal hardware, the one time passcode, the activation phone line and the agent call.
Merchants and ISVs
Contactless acceptance inside your own app, routed to the acquiring platform you already use. The same tap that takes the payment returns a network token the merchant owns, and a tap can confirm the card is in the customer’s hand before an unusually large order or a payout is released.
Replaces terminal hardware, shipping, key injection and replacement.
Agentic commerce platforms
A cardholder approves what an AI agent is about to do with the card they have on them. The proof is bound to one action, one amount, one counterparty and one moment. It cannot be replayed, applied to another action or reused after it expires.
Replaces knowledge based questions and a manual review.
Private beta
Sign up for the private beta. Approved partners receive the Tap for Everything document and the Android demo app, and a sandbox to build against.
Get startedHere is the path
Sign up with your company and a work email.
We review every signup.
Once approved, you receive the Tap for Everything document, the Android demo app and your sandbox invite.
A thirty minute call establishes where you are today and what the shortest route looks like.
Sesie Bonsi, Chief Innovation Officer
sesie@koard.com
