Security Center

Last updated: August 2026

Core Infrastructure Security

• Encryption in transit & at rest: All traffic is enforced via HTTPS/TLS 1.3, and database storage utilizes AES-256 bit encryption.
• Robust Auth Protocols: Password storage employs salted bcrypt hashing, supported by optional hardware security keys and mandatory Multi-Factor Authentication (MFA).
• Strict Session Controls: Secure token-based session verification with automatic inactivity timeouts and device fingerprinting.
• Multi-Layer Verification: Real-time automated identity checks combined with short-lived, single-use authentication codes sent to verified devices.
• Role-Based Access Control (RBAC): Administrative systems enforce zero-trust access models with full audit logging and multi-party approvals.

Handling & Security of Verification Documents

Your privacy and document security are our highest priorities during identity verification (KYC):

• All uploaded verification documents (IDs, proof of address, selfies) are encrypted at the client level before transmission.
• Documents are stored in isolated, access-restricted, SOC 2 Type II compliant storage environments with automated retention and purging policies.
• Identity data is processed solely by accredited automated compliance pipelines and authorized verification personnel.

Regulatory Compliance & Infrastructure

• Compliance Standards: Audited against SOC 2 Type II, ISO/IEC 27001, and PCI-DSS Level 1 compliance requirements.
• Data Rights & Privacy: Fully compliant with GDPR, CCPA, and global financial privacy frameworks managed by our dedicated Data Protection Officer.
• Licensed Banking Network: Account services, multi-currency balances, and money transfer capabilities are provided in partnership with fully regulated, tier-1 financial institutions.

Reporting a Vulnerability

We welcome reports from independent security researchers. If you identify a potential security issue, please contact our dedicated security team at security@allpaybridge.com.