App & device integrity
Firebase App Check validates genuine app traffic using Apple App Attest with DeviceCheck fallback and Google Play Integrity.
✓ Security at Perza
Protecting every
Protecting every
verified reward.
Perza uses layered controls from first launch through redemption to protect members, partners, and the integrity of every earning event.
For offer and survey partners
For reward providers
For trust teams
PProtected by design
App integrity
Verified identity
Reward integrity
01LayeredNo single signal decides trust.
02Server-authoritativeThe client never awards itself.
03ReviewableRisk evidence reaches the right people.
Defense in depth
Protection across the reward lifecycle.
Controls are applied before sign-in, while members earn, and before value leaves the platform.
Identity & eligibility
Firebase authentication, Didit phone verification, phone uniqueness, and configurable country eligibility help keep access accountable.
Network risk signals
Country, anonymizer, hosting-network, device, and account-velocity signals are evaluated server-side before access and redemption.
Verified earning
Partner callbacks—not the mobile client—are the authority for offer and survey rewards. Signed events and stable transaction IDs prevent duplicate credit.
Redemption safeguards
Risk assessment, cancellation windows, manual holds, account-bound delivery, and provider reconciliation protect value at withdrawal.
Operational accountability
Role-based admin access, visible risk reasons, audit events, and managed secrets support careful, traceable decisions.
Partner assurance
Built to preserve traffic quality.
Perza reconciles earning events to partner-supplied identifiers and supports reversals when a verified conversion is later invalidated.
Ask our team a security question- 1AttributeA member begins with a platform-bound identifier.
- 2VerifyThe partner confirms the qualifying event server-to-server.
- 3RecordPerza applies one idempotent ledger transaction.
- 4ReconcileReversals and disputes retain their event history.
i
Security without the playbook.
We share the controls partners need to assess Perza while keeping detection thresholds, scoring logic, credentials, and signatures confidential. Security questions and responsible disclosures can be sent to support@perza.app.