Offers at checkout
Send the cart and get back the eligible cover plans, prices and the product information document the customer must see. See Offers.
Preview. The API is shared with design partners and may change before launch. Register interest for sandbox access.
Phew developer documentation
Repair insurance, built into checkout.
Offer one-click cover against accidental damage and breakdown wherever your customers pay. Guides, API reference and the security model for merchants, platforms, payment providers and banks.
Three ways to integrate
Section titled “Three ways to integrate”Phew classifies every product automatically and only offers cover where it can insure the item. You choose how the offer reaches your customers.
Drop-in SDKA few lines of JavaScript render the full offer in your brand.
Iframe embedThe same offer, isolated in an iframe. No third-party script in your page.
Build with the APIYour own experience on top of Phew's classification, pricing and policies.
Shopify and WooCommerceReady-made apps that install the offer and handle policies for you.
Start with your role
Section titled “Start with your role”WebshopsInstall the Shopify or WooCommerce app, or drop the Phew SDK into your own checkout.
Payment providers and banksOffer cover inside your checkout, receipts or merchant portal, with OAuth 2.0, mTLS and signed requests.
Platforms and agenciesEnable Phew for many merchants at once through the Partner API.
Security teamsAuthentication levels, data protection, and our compliance roadmap.
What you can build
Section titled “What you can build”Policies from orders
Create a policy when the order is paid, and cancel it automatically when the item is returned. See Policies.
Claims, repair first
Settlement
Monthly statements with premiums collected, commission earned and cancellations. See Settlements.
Security, at the level you need
Section titled “Security, at the level you need”Every integration uses TLS 1.2 or later and scoped credentials. A small payment provider can start with an API key. A bank can use OAuth 2.0 with private-key JWT client authentication or mutual TLS, certificate-bound tokens, IP allowlists and signed requests. The security levels page compares the three levels side by side.
StandardSecret API key over TLS. The simplest way to start.
EnhancedAPI key plus IP allowlist and HTTP message signatures.
Bank-gradeOAuth 2.0 with private_key_jwt or mTLS, sender-constrained tokens, signed webhooks.