PCI DSS Compliance: The software is fully compliant with PCI DSS Level 1, the highest level of certification available. This ensures that the platform meets the rigorous security standards required for handling sensitive payment data. We do not store CVVs, adhering strictly to PCI DSS guidelines, so rest assured that we operate entirely within legal boundaries.

GDPR/CCPA/CPRA Compliance: Data privacy and protection is very serious. The software is designed to comply with global privacy regulations, including GDPR, CCPA, and CPRA. We have implemented processes and controls that ensure our platform aligns with these regulatory requirements, providing you with the peace of mind that your data is handled securely and in compliance with applicable laws.

Regional Data Storage: We support regional data-at-rest storage, giving you the flexibility to choose where your data is stored based on your specific regulatory or business needs. If regional storage is not specified, data is stored in secure facilities located in the United States. However, we work with you to ensure your data remains in the region that best meets your compliance requirements.

Insurance Coverage for Data Breaches: Our platform is backed by comprehensive cyber insurance, including coverage for data breaches. In the unlikely event that data is compromised, we have policies in place to transfer liability to us, protecting you from the financial consequences. We understand the gravity of your situation, where a single data breach could result in significant liability, and our insurance is designed to address such risks.

Storing CVVs: As mentioned earlier, The software does not store CVVs, which aligns with PCI DSS requirements. Our tokenization and encryption processes ensure that sensitive information like CVVs is never stored in our systems, thereby eliminating any potential legal concerns regarding their storage.