payments
fintech
serverless
GCP
event-driven
Conta Azul

Ycatu

Serverless payment proxy on GCP that brings multiple providers together in one place, maximizing profit per transaction. Event-driven, no SDKs, no integration APIs — only metrics. Full audit trail and fiscal integration with Conta Azul.

Ycatu

Objectives

Maximize profit on each transaction by choosing the most advantageous payment provider
Bring all payment providers together in one place — no SDKs and no integration APIs
Ensure high availability and trust in a 100% serverless environment on GCP
Provide full audit trail and fiscal integration with platforms like Conta Azul

Challenges

Each payment provider has different fees varying by transaction type — the best one must be chosen in each case
Process webhooks from multiple providers with security, idempotency, and traceability without containers
Maintain fiscal integration and full audit trail in a distributed event-driven environment

Implemented Solutions

Solutions implemented to ensure scalability, security and efficiency.

100% serverless architecture on GCP: Cloud Functions Gen2, event-driven Pub/Sub, Cloud Storage for auditing — no containers
Decision engine that analyzes fees in real-time to route each transaction to the highest-profit provider
Fiscal integration with Conta Azul and full audit trail with raw webhook storage for replay

Ycatu — Serverless Payment Proxy

Ycatu is DWCorp's payment orchestration solution, 100% serverless on Google Cloud Platform. No identity of its own, no SDKs, no integration APIs — Ycatu only processes payments in a highly available and trustworthy environment, maximizing profit on each transaction.

Integrated Providers

  • Stripe — International credit/debit cards
  • Mercado Pago — PIX and cards in Brazil
  • Iugu — Boletos, PIX, and cards
  • Abacate Pay — Emerging national solution
  • More integrations coming

Architecture (100% Serverless GCP)

  • Google Cloud Functions (Gen2) — Event-driven processing without containers
  • Google Cloud Pub/Sub — Event distribution between functions
  • Google Cloud Storage — Webhook archiving for audit and replay
  • Secret Manager — Secure credential storage

Fiscal Integration

  • Conta Azul — Automatic integration for fiscal reconciliation
  • Full audit trail of all payment events
  • Audit trail with raw webhooks stored

Security

  • Signature verification for all providers
  • Idempotency to prevent duplicate processing
  • Input validation and sanitization
  • Structured logging and monitoring