Security you can verify. Checked by independent auditors.
Every certification and assessment below shows who checked it, when, and what it covers.
Audits and security standards
Independent firms tested our controls and issued reports.
SOC 2 Type 1 and Type 2
Type 1 checks control design on one date. Type 2 tests that controls worked over time, with a clean, unmodified opinion.
- Type 1
- As of Jan 31, 2025
- Type 2
- Jul 1 to Dec 31, 2025, by NDB, CPA firm
- Covers
- Security, availability, confidentiality
- Type 2 system
- OnlineCheckWriter platform
SOC 1 Type 1 and Type 2
Independent review of our controls for financial processes, for customers whose own reporting depends on our payments.
- Type 1
- As of Jan 31, 2025
- Issued by
- Independent CPA firm
- Covers
- Financial process controls
- System
- Zil.US and OnlineCheckWriter
PCI DSS
The card industry standard for handling card data, as a service provider.
- Type
- Attestation of Compliance, SAQ D
- Result
- Compliant
- Assessor
- Cybersigma Consulting (QSA)
- Covers
- Card data security
ISO certifications
Certified by INTERCERT for our SaaS payment management solution and its supporting teams.
ISO/IEC 27001:2022
Information security management.
- Issued by
- INTERCERT
- Audited
- Feb 25 to Mar 3, 2025
- Covers
- Security risk management
ISO 9001:2015
Quality management.
- Issued by
- INTERCERT
- Certified
- Mar 7, 2025
- Covers
- Service quality processes
ISO/IEC 20000-1:2018
IT service management.
- Issued by
- INTERCERT
- Certified
- Mar 7, 2025
- Covers
- Support and change processes
Privacy and security assessments
Reviews of our practices against these frameworks.
HIPAA Security Rule
Protection of electronic health information.
- Report
- Oct 9, 2024
- Covers
- Health data safeguards
NIST 800-53
Security control families.
- Report
- Jan 31, 2025
- Method
- Testing, reviews, interviews
CCPA
California privacy rights.
- Report
- Jan 31, 2025
- Covers
- Know, access, delete, opt out
GDPR
Applicable GDPR requirements.
- Covers
- Transparency, minimization, security, rights
Recent Comments