Payvala

Assistant

Payvala Assistant

Suggestions

Press Enter to send · Shift+Enter for new line

PLATFORM ARCHITECTURE

Architecture

Understand how the Payvala platform is structured, how its major components interact, and how requests, transactions, and notifications flow through the platform.

Architecture Overview

Payvala Platform Architecture

Payvala is designed as a modular payment technology platform that separates client applications, API interfaces, business services, transaction processing, notification services, and connected devices.

Each major component has a defined responsibility, allowing the platform to remain maintainable, secure, observable, and scalable as new capabilities are introduced.

High-Level Architecture

How Payvala Components Work Together

External applications and platform users interact with Payvala through controlled interfaces. Requests pass through authentication, authorization, and validation before reaching the appropriate business services.

After business processing, applicable events can be passed to the notification layer for delivery through supported channels.

Loading diagram...

Platform Layers

Client & Application Layer

The Client and Application Layer contains systems and applications that interact with Payvala services.

These applications may represent institutions, merchants, NQR integrations, or other authorized API consumers.

TMS / Institution

Institution-facing systems that consume supported Payvala capabilities.

Merchant Platform

Merchant-facing applications and integrations.

NQR

NQR-related applications and integrations.

External API Consumers

Authorized applications integrating with Payvala APIs.

API & Integration Layer

The API and Integration Layer provides the controlled entry point between external applications and Payvala platform services.

This layer handles supported API interactions and applies the required access and validation controls before business processing.

API Gateway

Provides the controlled entry point for supported API requests.

Authentication

Verifies the identity or credentials associated with an incoming request.

Authorization

Determines whether the requester is permitted to perform the requested operation.

Request Validation

Validates incoming request data before it reaches business processing.

Webhooks

Provides supported event notifications to configured external systems.

Core Business Services Layer

The Core Business Services Layer contains the platform capabilities responsible for executing Payvala business logic.

Each service should have a clearly defined responsibility and interact with other services through controlled interfaces.

Transaction Services

Handles supported transaction-related business operations.

Merchant Services

Handles merchant-related operations and configurations.

Institution Services

Handles institution and TMS-related operations.

Configuration Services

Manages configuration required by supported platform services.

Notification & Device Layer

The Notification and Device Layer is responsible for delivering applicable payment or platform events through configured notification channels.

Virtual Soundbox and Physical Soundbox act as notification endpoints and provide supported notifications in audio format.

Notification Service

Processes applicable notification events and routes them to supported notification channels.

Virtual Soundbox

Communicates supported payment or platform notifications through audio output.

Physical Soundbox

Communicates supported payment or platform notifications through physical audio hardware.

Webhook Notification

Delivers supported events to configured external endpoints.

Request & Transaction Flow

Request Lifecycle

A request entering Payvala follows a controlled processing path. The request is authenticated and authorized, validated, and then forwarded to the appropriate business service.

When the operation produces a relevant transaction or platform event, the event can be processed by the Notification Service and delivered through the configured notification channels.

1

Client Request

A supported client or integrated application sends a request to Payvala.

2

API Entry

The request enters through the appropriate Payvala API interface.

3

Authentication

The request credentials or identity are verified.

4

Authorization

The system verifies whether the requester has permission to perform the requested operation.

5

Request Validation

Request parameters and required data are validated.

6

Business Processing

The appropriate Payvala business service executes the required business logic.

7

Transaction / Event

A supported transaction result or platform event is generated.

8

Notification Processing

Applicable notification events are processed by the Notification Service.

9

Notification Delivery

The event is delivered through supported channels such as webhooks or soundbox notifications.

Loading diagram...

Notification Architecture

Event to Audio Notification

Payvala separates transaction processing from notification delivery. A payment or platform event is first processed by the relevant business service and then passed to the Notification Service when notification delivery is applicable.

Virtual Soundbox and Physical Soundbox consume supported notification events and communicate them through audio output.

Loading diagram...

Service Communication

Payvala services communicate through defined interfaces and controlled service boundaries.

Each component should maintain a clear responsibility so that changes to one capability do not unnecessarily affect unrelated platform capabilities.

Clear Service Boundaries

Each service has a clearly defined responsibility.

Controlled Access

Service communication follows defined access controls.

Validated Requests

Requests are validated before processing.

Reliable Processing

Services handle expected operational failures appropriately.

Data Architecture

High-Level Data Flow

Application requests are processed through the API and business service layers before interacting with the platform data layer.

The data layer contains information required to support platform operations, configurations, transactions, and operational traceability.

Loading diagram...

Security Boundary

Controlled Platform Access

External requests enter the Payvala platform through controlled API boundaries.

Authentication, authorization, and request validation are applied before requests reach internal business services.

Authentication

Verifies the identity or credentials associated with a request.

Authorization

Controls access to permitted resources and operations.

Request Validation

Validates incoming request structure and required data.

Loading diagram...

Detailed security policies and controls are documented separately in Platform → Security.

Reliability & Failure Handling

Reliable platform operation requires services to handle expected failures, temporary communication issues, and operational errors in a controlled manner.

Timeout Handling

Controls operations that do not complete within the expected processing period.

Retry Handling

Supports retrying recoverable operations according to applicable service rules.

Idempotency

Helps prevent duplicate processing when an operation is submitted more than once.

Health Monitoring

Provides visibility into service availability and operational health.

Logging

Provides operational information for troubleshooting and analysis.

Audit Trail

Supports traceability of relevant platform operations and events.

Environment Architecture

Environment Separation

Payvala separates environments according to their operational purpose so that development, integration testing, and production workloads can be managed independently.

Development

Used for development and internal testing.

Sandbox

Used for integration testing and developer validation.

Production

Live environment used for production platform operations.

Loading diagram...

Detailed sandbox integration guidance is documented under Developer → Sandbox.

Secure. Reliable. Scalable.

Payvala is built with enterprise-grade security, 99.9% uptime, and scalable infrastructure.