beelz.aiYour card, never exposed
Bank-grade card vaulting. The AI gets single-use tokens. Your card number never leaves our vault.
The Simple Version
Think of Lockbox as our secure vault for your card. The beelz app never knows your card number — it only has permission to request single-use tokens when it needs to pay a bill.
It's the same pattern your bank uses when it issues a virtual card number for a specific purchase. The real card stays safe; the token does the work.
How It Works
You add your card once
Your card is captured via our vault's secure iframe — it goes straight into our isolated, PCI Level 1 vault, sealed off from the rest of beelz. The app receives a mandate ID, never a card number.
The AI gets a single-use token
When a payment starts, the app requests a single-use reveal token from our vault. The token is valid for one use only and expires after the transaction. The AI types the card details into the biller's form and the token is gone.
Payment goes through
The biller charges your card through their normal payment flow — exactly as if you'd typed it yourself. No middleman taking a cut, no beelz-specific payment processor.
Confirmation captured
beelz screenshots the confirmation page and saves the confirmation number. You get the receipt — the biller sees you as the payer, because you are.
🔒Why This Is Secure
The app is the brains; our vault is the safe. The app orchestrates payments, while your card stays sealed in an isolated vault — separate from everything else.
PCI Level 1 compliant
The highest level of card data security, same as your bank
No app-side card exposure
The beelz app never stores, logs, or transmits your raw card number — it stays sealed in the vault
Single-use tokens
Each payment gets a fresh token that expires immediately after use
Why Not Just Store the Card?
Storing a card the naive way
- ✕Your raw number sits in a database, ready to leak
- ✕One breach exposes every stored card at once
- ✕You'd have to update it when your card changes
- ✕Unlimited charge potential with no per-use approval
With Lockbox vaulting
- ✓Your raw number never reaches the app or AI
- ✓Each payment uses a fresh, expiring token
- ✓Sealed in an isolated, PCI Level 1 vault
- ✓You can revoke access anytime, instantly
🏦 About Lockbox
Lockbox is our own secure vault for agentic payments — purpose-built for an AI agent that charges a card on your behalf. It runs on proven, industry-standard, bank-grade infrastructure: we didn't reinvent the wheel, we use the same audited, PCI Level 1 foundations that protect online banking.
Your card stays vaulted.
Add a card once. beelz handles every payment — with single-use tokens, not your real number.