NovuPay white paper
Operator of Payment System platform architecture and transaction orchestration
This white paper describes NovuPay as a technology platform for payment initiation, orchestration, routing, monitoring, and reporting. It is informed by our internal OPS application documentation, by the structure of the current NovuPay implementation, and by public payment-platform references on orchestration, webhooks, and payment operations.
OPS documentation for partners, participants, and reviewers

A technology operator for digital payment initiation, routing, and transaction visibility

NovuPay provides orchestration infrastructure that helps participants generate payment requests, route payment instructions, receive status updates, and maintain transaction records. NovuPay does not accept deposits, hold customer funds, or perform clearing and settlement. Those financial functions remain with regulated financial institutions and payment processing partners connected to national payment rails.

Platform role
Payment orchestration
Funds custody
Not held by NovuPay
National rail model
Partner-integrated
Operational focus
Routing plus reporting

1. Platform overview

Role in the payment ecosystem

NovuPay operates a technology platform designed to facilitate the initiation, routing, and monitoring of electronic payment transactions between participant systems and regulated financial institutions or payment processing partners. The platform is intended to provide a consistent operational layer for digital payment interactions while maintaining interoperability with external payment infrastructure.

In practical terms, NovuPay acts as a payment orchestration and routing environment. The application supports the creation of payment requests, transaction persistence, participant-initiated payment flows, redirect-based checkout journeys, callback handling, webhook-driven status updates, and transaction reporting. Current platform code reflects this operating model through API endpoints for payment requests, payment status checks, redirects, merchant payment flows, and asynchronous webhook processing.

NovuPay operates strictly as a technology operator of a payment system. It does not maintain customer deposit accounts, does not hold settlement balances, and does not assume custody of customer funds. Clearing, authorization, and settlement functions remain with regulated financial institutions, payment networks, and processing partners connected to national payment rails.

Core platform functions
  • Generation of payment requests and payment session references.
  • Secure routing of payment instructions to external processors or payment partners.
  • Transaction orchestration across initiation, status monitoring, redirects, and webhooks.
  • Recording of transaction metadata, references, timestamps, and related operational payloads.
  • Support for reporting, reconciliation, and participant-facing operational visibility.

2. Payment system participants

Distinct roles in transaction processing
Customers

Customers initiate payments through web checkout pages, QR-based payment interfaces, or participant applications. They complete payments using bank or wallet accounts maintained by regulated financial institutions.

Platform participants

Participants such as merchants, government entities, utilities, or platform-integrated services use NovuPay to generate payment requests, pass transaction metadata, receive status updates, and monitor payment outcomes through APIs or dashboards.

Financial institutions

Regulated financial institutions perform account management, customer authentication, authorization checks, account debiting, beneficiary crediting, and participation in interbank clearing and settlement systems.

Payment processing partners

Processing partners provide connectivity to payment rails and channel infrastructure such as QRPh, real-time payment systems, card acceptance flows, or other regulated payment networks. These partners handle the regulated processing and settlement side of the transaction.

3. Payment transaction lifecycle

From initiation to transaction status confirmation

NovuPay’s transaction lifecycle follows a common orchestration pattern also seen in modern payment platforms: request generation, routing, customer authorization, asynchronous event handling, and participant notification. In the current implementation, this appears through payment-request endpoints, redirect flows, callback endpoints, and webhook handlers that update transaction state after processor responses are received.

Step 1. Payment initiation

A participant or customer initiates a payment through a NovuPay-powered interface or API flow. Typical inputs include amount, currency, reference number, participant identity, customer information, callback destinations, and transaction metadata.

Step 2. Payment request generation

NovuPay generates the payment request, persists transaction records, assigns internal or partner-facing references, and prepares the request for transmission to the relevant processing partner or orchestration route.

Step 3. Customer authorization

The customer completes payment authorization through the bank, wallet, QR flow, or externally hosted checkout experience provided by the regulated processor or institution handling the financial transaction.

Step 4. Response and event handling

Authorization results return through redirect handlers, status polling, or webhook callbacks. NovuPay records the resulting state, updates its transaction and bill records, and prepares the corresponding operational response for the initiating participant.

Step 5. Participant visibility

Participants receive payment outcome visibility through API responses, callback URLs, dashboards, or application-level redirects. This lets upstream systems synchronize their own records with the latest known transaction state.

Step 6. Reconciliation support

Transaction metadata, timestamps, partner references, and status updates are retained by NovuPay to support reconciliation, investigation, dispute handling, and internal or regulatory reporting.

4. Payment routing and funds flow

Separation of orchestration and movement of funds

NovuPay facilitates the transmission and routing of payment instructions but does not itself move funds. This separation is a key principle in payment orchestration and aligns with how many payment platforms distinguish transaction control logic from financial settlement logic.

In a typical QR or account-based payment flow, the customer interacts with a bank or wallet application, that institution processes authorization, and the actual movement of funds occurs through the underlying regulated payment rail. NovuPay’s role is to generate the request, route the instruction to the correct partner, receive updates, and maintain the transaction record.

Representative funds flow

Customer

→ Customer bank or wallet application

→ National or partner-connected payment rail

→ Receiving financial institution

→ Beneficiary account

5. Settlement and clearing framework

Regulated infrastructure performs financial settlement

Clearing and settlement are performed outside NovuPay by the regulated institutions and infrastructures connected to the relevant payment rails. Where QRPh or real-time interbank transfers are involved, settlement occurs within the financial ecosystem defined by participating banks, wallet operators, and payment network rules.

NovuPay does not maintain settlement accounts and does not perform interbank fund transfers. Its role is to retain sufficient transaction records to support downstream reconciliation, transaction monitoring, exception handling, and participant reporting.

6. Integration with regulated payment processing partners

Connectivity to external payment infrastructure

NovuPay integrates with external payment processing partners through secure APIs. The current codebase reflects this model through partner-oriented payment request generation, redirect-based hosted payment journeys, callback URLs, and webhook processing. These integrations allow NovuPay to transmit payment instructions and receive status updates without becoming the custodian of funds.

Public payment-platform references emphasize several good practices that inform NovuPay’s model: keep routing logic separate from settlement activity, support asynchronous event delivery through webhooks, and maintain clear processor boundaries so the financial responsibilities remain with regulated entities. NovuPay’s architecture follows that same general direction.

7. NovuPay system architecture

Application and service structure
Frontend and participant interfaces

NovuPay exposes web-based checkout and participant-facing flows, along with administrative and documentation pages. The platform also supports API-based initiation and participant integrations through REST-style endpoints for payment requests, payment status, and related operational flows.

Backend orchestration services

Backend services handle payment request creation, request signing for some partner connections, transaction persistence, payment status checks, callback handling, redirect orchestration, and webhook-based transaction updates.

Operational data storage

The platform stores transaction records, references, participant payloads, timestamps, payment URLs, partner references, and status data to support routing visibility, reporting, and downstream reconciliation tasks.

Cloud-ready infrastructure model

The platform is designed for web-scale deployment with encrypted communications, application-layer monitoring, modular service logic, and the ability to evolve toward stronger horizontal scaling, redundancy, and participant-specific routing as transaction volumes grow.

8. Platform security controls

System integrity and access protection

NovuPay implements multiple layers of operational and application security. Based on the current platform design, these controls include role-based application access, API key-gated routes for selected endpoints, reference-level transaction logging, secure HTTPS communications, protected callback flows, and structured recording of inbound webhook activity.

Public platform references such as Stripe and Adyen also emphasize the importance of secure webhook handling, transport encryption, and authenticated partner communication. These principles are directly relevant to NovuPay’s evolution as an OPS platform and align with the general direction of the current architecture.

  • Role-based access and operational segregation in participant-facing systems.
  • Secure API access patterns for protected initiation endpoints.
  • Encrypted transport over HTTPS and TLS-capable environments.
  • Comprehensive transaction and webhook logging for auditability.
  • Reference-based transaction tracking across redirect, callback, and webhook events.

9. Payment system risk management framework

Operational, security, and integration risk controls

NovuPay’s risk posture as an operator of payment system is centered on operational continuity, secure partner integration, transaction traceability, and clear segregation of responsibilities between NovuPay and regulated financial actors. Risk categories relevant to the platform include operational risk, cybersecurity risk, system availability risk, transaction fraud risk, and third-party integration risk.

Risk mitigation approach
  • Maintain transaction monitoring and anomaly visibility through system logs and status tracking.
  • Reduce integration risk by clearly separating orchestration from settlement and custody responsibilities.
  • Use authenticated API flows and controlled partner connectivity for payment initiation.
  • Preserve audit trails for reconciliation and post-incident analysis.
  • Perform due diligence and ongoing operational review of third-party payment partners.

10. Operational resilience and incident response

Continuity during disruptions

Payment operations depend on reliable event handling, partner uptime, and responsive status visibility. NovuPay therefore requires continuous monitoring of payment services, partner integrations, infrastructure performance, and security events. This model is consistent with public webhook and platform guidance that stresses high-availability endpoints and prompt processing of asynchronous payment events.

When incidents occur, the required response pattern is straightforward: identify the event, classify its severity, contain the issue, restore service, investigate root cause, and document the incident for operational learning and governance. Business continuity planning should also include backup infrastructure, retry logic for asynchronous events, and escalation paths for partner-related outages.

11. Platform role summary

OPS positioning in one view

NovuPay operates as a technology platform that facilitates payment initiation, transaction routing, status handling, monitoring, and reporting within the Philippine digital payments ecosystem. It is designed to support participants who need a structured orchestration layer while preserving the proper regulatory and operational roles of financial institutions and payment processors.

NovuPay, in summary
  • Generates and routes payment requests.
  • Coordinates redirects, callbacks, and webhook-driven transaction updates.
  • Maintains transaction records and operational reporting data.
  • Integrates with regulated processors and payment partners.
  • Does not perform custody, clearing, or settlement of funds.
contact

Ready to Elevate Your Payment Experience?

Get Started