We built the Direct Debit application on its own address, completely separate from the Royal Cars website and its email. Each link is personal, works once and expires after 30 days, and the request from DriverPay is protected by a private key so no one else can create links. Submitted bank details are stored encrypted, the admin area needs a sign-in, and notification emails to Royal Cars never contain bank details. In DriverPay we added a “Send Direct Debit link” button on each driver, using their iCabbi number, which can be switched on or off for each DriverPay customer. We also added emailed reminders, so drivers are nudged by email as well as in the app, and an optional archive to OneDrive or SharePoint that is built but switched off at Royal Cars’ request for now. Testing with Royal Cars started in September 2026 and the DriverPay link went live in October 2026.