Request a Demo
Platform InfrastructureTier-2 Hardware

Payment Engine

The single payment processing layer for the entire Civic platform — every module that collects money routes through Payment Engine.

99.99%

Uptime SLA

<3s

Auth Latency (p99)

SAQ-A

PCI Compliance

10+

Payment Methods

Purpose-Built for Canadian Municipalities

Ontario Compliant
MFIPPA Ready
AODA Accessible
Bilingual Support
Canadian Hosted
SOC 2 Aligned

How It Works

The identity journey, step by step

From first registration to golden record resolution — how a resident's identity evolves across the platform.

01

Online Bill Payment

A resident pays their property tax and utility bill together from their phone.

How it works

The resident logs into My Civic Dashboard, adds their property tax instalment and utility bill to the cart, reviews the total with any convenience fees clearly disclosed, and pays with their saved Visa. A receipt is emailed instantly and both accounts are updated in real-time.

Step 1 of 5

Purpose & Scope

What this module owns

Clear ownership boundaries prevent duplication and ensure every capability has exactly one authoritative home.

Owns

14

Delegated to

5

Account balances / billing

billing-invoicing

GL posting rules

financial-core

Notification delivery

notification-engine

Citizen identity

civic-identity

Audit log storage

audit-trail

These capabilities are handled by dedicated modules and consumed via stable API contracts — keeping boundaries clean and ownership unambiguous.

Core Capabilities

What it does

4 capability groups comprising 8 discrete capabilities — each with API surface, business rules, and data ownership.

PCI-DSS Level 1 certified hosted payment page with tokenization — card numbers never touch municipal servers.

Hosted Payment Page

All card data entry on PCI-DSS Level 1 certified hosted page. Customizable with municipality branding. iFrame or redirect integration.

Tokenization

First payment creates a secure token; returning customers pay with saved methods without re-entering card data.

3D Secure 2.0

Visa Secure, Mastercard Identity Check — strong customer authentication, reduced fraud/chargeback liability.

Fraud Prevention

AVS, CVV verification, velocity checks, geographic restriction, IP blacklisting.

Support for credit cards, debit, Interac, digital wallets, EFT/PAD, bank transfer, cash, and cheque.

Credit Cards

Visa, Mastercard, American Express.

Digital Wallets

Apple Pay, Google Pay, Samsung Pay — online, counter (NFC terminal), and kiosk.

EFT / PAD

Electronic Funds Transfer and Pre-Authorized Debit via CPA Standard 005 format.

Cash & Cheque

In-person at service counters and POS terminals; batch processing and deposit preparation.

Real-World Scenarios

Who uses this, and how

3 persona-driven scenarios showing how Payment Engine works in practice — from resident registration to privacy compliance.

Property Owner

Tax Season Multi-Payment

Maria owns two properties and wants to pay both tax instalments plus her utility bills in one transaction.

Steps

  1. 1Maria logs into My Civic Dashboard and navigates to the payment cart
  2. 2She adds her primary residence tax instalment ($2,400) and utility bill ($180)
  3. 3She adds her rental property tax instalment ($1,800)
  4. 4The cart shows the total ($4,380) with no convenience fee for debit
  5. 5She pays with Interac Online — one transaction, three bills, two properties
  6. 6Three receipts are generated and emailed; all accounts updated in real-time

Outcome

One login, one payment, three bills settled. Financial-core receives three separate GL postings to the correct revenue accounts.

View scenario

Walk-in Resident

Self-Service Kiosk Payment

Ahmed visits the municipal office after hours and uses the self-service payment kiosk in the lobby.

Steps

  1. 1Ahmed approaches the kiosk and selects 'Pay a Bill'
  2. 2He scans the QR code on his utility bill
  3. 3The kiosk displays the account details and amount owing
  4. 4He taps his credit card on the contactless reader
  5. 5The kiosk prints a receipt and emails a copy

Outcome

24/7 payment access without counter staff. The payment is settled and reconciled automatically.

View scenario

Finance Staff

PAD NSF Recovery

A batch of PAD payments is processed and three return NSF. The system handles recovery automatically.

Steps

  1. 1PAD batch is submitted via CPA-005 file to the bank
  2. 2Bank returns 3 NSF items in the return file
  3. 3System automatically retries each after 3 days
  4. 4One succeeds on retry; two fail again
  5. 5Failed accounts are flagged and notification-engine sends notices to residents
  6. 6Staff reviews the two failed accounts and contacts residents to arrange alternative payment

Outcome

Automated NSF handling recovers one payment without staff intervention. The remaining two are escalated with full context for staff follow-up.

View scenario

Internal Architecture

How it's built

4 architectural layers comprising 24 components — from API gateway to data quality engine.

4 layers · 24 total components

Payment Engine

Every module owns a single bounded context, exposes stable APIs, and can be composed into any Civic product — that's the architecture that scales.

Krutik Parikh

Creator of Civic

Data Model

Entity Architecture

6 entities with 6 relationships — the authoritative schema for this bounded context.

Entities

Select an entity to explore its fields and relationships

API Surface

Integration Endpoints

28 RESTful endpoints across 6 resource groups — plus 12 domain events for async integration.

|
POST

/api/v1/payments

Initiate a payment (returns hosted page URL or processes server-side)

GET

/api/v1/payments/{id}

Get payment status and details

POST

/api/v1/payments/{id}/capture

Capture an authorized payment

POST

/api/v1/payments/{id}/refund

Process full or partial refund

POST

/api/v1/payments/{id}/void

Void a receipt / reverse a payment

GET

/api/v1/payments/history

Payment history for a citizen (filterable)

GET

/api/v1/payments/receipt/{id}

Download receipt PDF

POST

/api/v1/payments/guest-lookup

Guest account lookup (account number + postal code)

Ecosystem

Products that depend on this module

18 Civic products consume Payment Engine — making it one of the most critical platform services in the ecosystem.

Technical Specifications

Performance, Compliance & Configuration

Availability

Target99.99% uptime (payment is revenue-critical)

Latency

TargetPayment authorization < 3 seconds p99; receipt generation < 1 second

Throughput

Target500 concurrent payment sessions; burst capacity for tax due dates (10,000+ payments/hour)

PCI Scope

TargetSAQ-A only — zero cardholder data on municipal infrastructure

Encryption

TargetTLS 1.2+ for all payment pages; AES-256 for stored tokens/bank info

Backup & Recovery

TargetRPO: 0 (zero data loss for financial transactions); RTO: 1 hour

Audit

TargetEvery payment, void, refund, chargeback, and reconciliation action logged

FAQ

Frequently Asked Questions

Ready to Integrate

Build on Payment Engine

Request an architecture brief, integration guide, or live demo environment for your team.