backend phase 15 & frontend phase 8

server/src/Infrastructure/Baya.Infrastructure.Persistence/ApplicationDbContext.cs

@@ -172,5 +172,12 @@ public class ApplicationDbContext: IdentityDbContext<User, Role, int, UserClaim,
         {
             builder.Property(p => p.IbanSnapshot).HasConversion(encrypted);
         });
+
+        // b15 partner-center settlement account: the center's IBAN (only when merchant-of-record) is encrypted
+        // at rest through the same seam and never serialized in plaintext — reads mask it to the last 4 digits.
+        modelBuilder.Entity<Baya.Domain.Entities.PartnerCenters.PartnerCenter>(builder =>
+        {
+            builder.Property(c => c.SettlementIban).HasConversion(encrypted);
+        });
     }
 }