Compliance Status
ISO 27001 & SOC2
In Progress
MSB Registrations
US (FinCEN) — Canada (FINTRAC)
Compliance Certifications
Control Categories
Infrastructure Security
Physical and cloud infrastructure protection measures
Cloud Infrastructure
Enterprise-grade cloud hosting with redundancy
Network Security
Firewall protection and network segmentation
Encryption at Rest
AES-256 encryption across all storage services
DDoS Protection
Multi-layer DDoS mitigation and rate limiting
Infrastructure Monitoring
24/7 automated alerting for anomalous activity
Organizational Security
Company-wide security policies and procedures
Security Training
Regular employee security awareness training
Background Checks
Comprehensive screening for all employees
Incident Response
24/7 security incident response team
Access Reviews
Quarterly least-privilege access reviews
Product Security
Security measures built into our products
Encryption at Rest
AES-256 encryption for stored data
Encryption in Transit
TLS 1.3 for all data transmission
Access Control
Role-based access control (RBAC)
Penetration Testing
Annual third-party penetration tests
Internal Security Procedures
Internal processes for maintaining security
Vulnerability Scanning
Automated security scanning in CI/CD
Audit Logging
Comprehensive logging of all system access
Change Management
Peer review and approval for all changes
Data & Privacy
Data handling and privacy protection controls
Data Minimization
Collect only necessary customer data
Data Retention
Automated data retention policies
Right to Deletion
Customer data deletion upon request
Data Collected
Types of data we collect and process