Security & trust

Security that never takes a day off

Security that never takes a day off

Your money and data are protected by independent audits, end-to-end encryption and round-the-clock monitoring.

Your money and data are protected by independent audits, end-to-end encryption and round-the-clock monitoring.

Certifications

Independently audited, every year

Reports are available to customers under NDA from your dashboard.

SOC 2 Type II

Audited annually

Controls for security, availability and confidentiality.

Controls for security, availability and confidentiality.

PCI DSS Level 1

Highest card standard

Card data is tokenised and never touches your systems.

Card data is tokenised and never touches your systems.

ISO 27001

Certified ISMS

Information security managed to international standards.

Information security managed to international standards.

GDPR

EU data protection

Data residency options and full data-subject rights.

Data residency options and full data-subject rights.

How we protect you

Layers of protection on every payment

Layers of protection on every payment

End-to-end encryption

End-to-end encryption

AES-256 at rest, TLS 1.3 in transit, keys rotated and stored in hardware security modules.

AES-256 at rest, TLS 1.3 in transit, keys rotated and stored in hardware security modules.

Granular access control

Granular access control

Role-based permissions, approval chains and per-card limits for every team member.

Role-based permissions, approval chains and per-card limits for every team member.

24/7 fraud monitoring

24/7 fraud monitoring

Machine-learning models score every transaction and block anomalies in milliseconds.

Machine-learning models score every transaction and block anomalies in milliseconds.

Safeguarded funds

Safeguarded funds

Customer money is held in segregated accounts at regulated partner banks.

Customer money is held in segregated accounts at regulated partner banks.

Resilient infrastructure

Resilient infrastructure

Multi-region hosting with automatic failover and a 99.99% uptime target.

Multi-region hosting with automatic failover and a 99.99% uptime target.

Responsible disclosure

Responsible disclosure

A public bug bounty programme rewards researchers who report vulnerabilities.

A public bug bounty programme rewards researchers who report vulnerabilities.

Every payment, checked

What happens in the 1.8 seconds after you hit send

01

Authenticate

Biometric or 2FA confirms it’s really you.

02

Screen

Sanctions, velocity and risk checks run in parallel.

03

Encrypt

Payment data is tokenised and encrypted end-to-end.

04

Settle

Funds move and both sides get a signed receipt.

Found a vulnerability?

Report it to security@company.com. We respond within 24 hours and reward valid reports.

Report it to security@company.com. We respond within 24 hours and reward valid reports.

FAQ

Questions, answered

Questions, answered

Still have questions?

Our team replies within one business day.

Our team replies within one business day.

Is my money protected?

−

Funds are held with regulated partner banks and safeguarded in segregated accounts. Replace with your own regulatory disclosure.

Where is my data stored?

+

Do you share data with third parties?

+

How do you detect fraud?

+

What happens if my card is stolen?

+

Can I enforce 2FA for my whole team?

+

How do I report a security issue?

+

Get started

Ready to move money with confidence?

Open an account in minutes. No credit card required.

Get started

Ready to move money with confidence?

Open an account in minutes. No credit card required.

Get started

Ready to move money with confidence?

Open an account in minutes. No credit card required.

kaori

The calm, secure way for modern teams to move money.

© 2026 Company Inc. Financial services provided by regulated partner institutions. Replace with your disclosures.

SOC 2

PCI DSS

GDPR

kaori

The calm, secure way for modern teams to move money.

© 2026 Company Inc. Financial services provided by regulated partner institutions. Replace with your disclosures.

SOC 2

PCI DSS

GDPR

kaori

The calm, secure way for modern teams to move money.

© 2026 Company Inc. Financial services provided by regulated partner institutions. Replace with your disclosures.

SOC 2

PCI DSS

GDPR

Create a free website with Framer, the website builder loved by startups, designers and agencies.