API integration security

Our organization is trying to implement API integration with another company for payment gateway access. The API will need to collect some reference data from our database to update the payment gateway. this has been tested working.

Now we are challenged to secure this API integration.

Could you please share some information and suggestions?

Thanks, in advance.

access api collect cybersecurity data database gateway information integration organization payment reference security share thanks update working