Security

How we protect your account and your money.

Two-factor sign-in for your team, revocable keys for your servers, and a record of every change to your balance.

Roles for your team

Each teammate gets a role. Refunds, exports and API keys each need their own permission.

Keys you control

One key per integration. See where it’s used, and revoke it without touching the rest.

Balances you can trace

Every change to your balance links back to the payment, refund or payout behind it.

Controls

What’s in place today.

HTTPS on every request

Two-factor sign-in

Idempotent order requests

API activity log

Found a
security issue?

Email us