We are powered by two of the best payment gateways in the world, Stripe and PayPal.

Stripe has been audited by an auditor with PCI certification. As a result of this audit, Stripe was certified as a Level 1 PCI Service Provider, the most stringent level of certification available in the payments industry. All credit card numbers are encrypted using AES-256 data-at-rest. Decryption keys are saved on separate machines. None of Stripe’s internal servers and daemon are able to obtain plaintext card numbers. Stripe’s infrastructure for storing, decrypting, and transmitting card numbers runs in a separate hosting environment and does not share credentials with Stripe’s primary services.

The same is true for PayPal, which has developed some of the most robust processes in terms of payment security. PayPal holds certifications under numerous programs and standards, including Visa Cardholder Information Security Program, Mastercard Site Data Protection Program, and American Institute of Certified Public Accountant’s Statement on Standards for Attestation Engagements No. 18 SOC 1.

---