All these exchanges are encrypted. At each webservice call, your website must encrypt the parameters with your public key. Each response sent by the VANILLA PAY platform must be decrypted with your private key.The decryption uses the functions of the phpseclib library.