Secure Razorpay Payment Integration -- 2

I already have Razorpay running on both my website checkout and our companion mobile app, but recent red-flags have made me rethink the way we handle customer data. I need someone who knows the Razorpay APIs, webhooks, and their security add-ons inside-out to harden the entire flow. The goal is simple: every transaction must keep customer card and UPI details completely shielded while still giving us smooth, instant confirmations. That means tightening tokenisation, making sure no sensitive data ever touches our servers, and setting up best-practice authentication around dashboard access. If you have experience achieving PCI-DSS compliance on Razorpay or deploying their data-encryption libraries, that’s exactly the mindset I’m after. Deliverables I will review for acceptance: • Revised frontend and backend code (web + app) using Razorpay-recommended secure tokens only • Properly configured webhooks with verified signatures and fail-safe retries • Documentation showing how customer credentials stay off our infrastructure and how admins log in securely • Short hand-off session walking me through the new setup and how to monitor for anomalies If you’ve locked down Razorpay implementations before—whether in Node, PHP, Python, or a mobile stack—let’s talk.