Incident Response Plan
How security incidents are declared, contained, and resolved, and our commitment to notify affected merchants within 72 hours of confirming a breach of their data.
The full policy text is shared on request
Request access and we'll open version 1.0 for your review, along with everything listed below.
- Every published policy in full
- Control detail with SOC 2 criteria
- Named subprocessor list
Most requests are approved within one business day.