Security
Security at Paays
Every verification runs on controls that are independently audited and tested every year.
- AttestationSOC 2 Type II complianceIndependently audited: Type I in 2023, Type II since 2024.
- IndustryDIACC memberDigital ID and Authentication Council of Canada.
How Paays protects your data.
- Penetration testing
- Every year, by an independent firm
- Encryption
- TLS 1.2 or higher in transit, AES-256 at rest
- Hosting
- Amazon Web Services
- Secure development
- Code and dependencies scanned on every change
- Access control
- Role-based access, multi-factor authentication, 24-hour sessions
- Compliance records
- Verification reports that support FINTRAC identification requirements
Report a vulnerability
Write to security@paays.com.
Privacy
The Paays privacy policy explains what personal information is collected, how it is used, and how to contact us about it.
Read the privacy policy