Reporting
Clients rely on reports to reconcile transactions, track performance, and meet compliance requirements.
Nopan provides flexible options for retrieving reports depending on your operational needs:
- Secure file transfer (SFTP)
- Manual download through the merchant portal
- Programmatic access through REST APIs
PGP encryption is supported for clients that require end-to-end confidentiality. This can be enabled on request and applied consistently across all delivery channels.
Available Report Types
Merchant report categories
Additional report types can be provisioned depending on your integration and market requirements.
Reach out to your Nopan technical contact for custom formats.
Delivery Options
1. SFTP Delivery
Reports can be automatically deposited on a secure SFTP server. You can choose:
- Use Nopan-hosted SFTP - we provision accounts for your team.
- Use your own SFTP - Nopan pushes reports directly to your infrastructure.
PGP encryption can be enabled so that each file is encrypted with your public key before delivery.
2. Merchant Portal
You can log into the Nopan Merchant Portal and manually download available reports.
This is useful for finance teams or ad-hoc reporting needs.
3. REST API Access
Reports can also be retrieved programmatically through the Reports API, enabling full automation:
GET /reports/{reportType}?date=2025-08-01
Authorization: Bearer <access-token>
The API supports filtering by date ranges, report type, and format (CSV, JSON).
Authentication is handled the same way as other Nopan APIs: with mTLS and access tokens.
Optional : PGP Encryption
Nopan supports optional PGP encryption for clients requiring data-at-rest confidentiality outside TLS.
- Your public key must be registered with Nopan in advance.
- Encrypted reports will carry the
.pgpfile extension. - Reports can still be delivered unencrypted if your systems operate inside a controlled environment.
Example decryption:
gpg --output settlement.csv --decrypt settlement.csv.pgp
Error Handling
When retrieving reports, you may encounter errors:
Never process financial data or trigger business logic on unverified or corrupted reports.