You're safe with us
We are serious about security and protecting our users. We have built kerpay with the highest security standards, actually the same as Wall Street banks.
We use SSL everywhere
We force HTTPS on our website and across all applications. This creates a secure connection between your internet browser and our servers and protects all the data transmitted over the connection. SSL is the most secure internet protocol, it is used by high street banks or governments to encrypt communications. Whether your connect from your mobile or your computer, from home or a public Wifi hotspot, SSL ensures end-to-end encryption. kerpay actually checks SSL status each time you try to connect and only allows secure connections.
We don't store credit card data
All payment processing is handled by Stripe, a certified Level 1 PCI Service Provider (the most stringent level of certification available). When credit card data is submitted via kerpay it is sent directly to Stripe over a secure SSL connection. The payment data never touches our servers. Stripe uses best-in-class security tools and practices to maintain a high level of security. Stripe is actually trusted by 100'000 major internet players such as Kickstarter or Facebook.
We host in a secure environment
Kerpay's hosting provider utilizes state-of-the art electronic surveillance and multi-factor access control systems. Data centers are staffed 24x7 by trained security guards, and access is authorized strictly on a least privileged basis. Multiple geographic regions allow them to remain resilient in the face of most failure modes, including natural disasters or system failures. kerpay's servers are behind firewalls and human monitored 24/7 to meticulously thwart suspicious activity and deflect DDoS attacks.
We are open to responsible disclosure
Our security team rapidly investigates all reported security issues. If you believe you have discovered a bug in kerpay's security, please get in touch at [email protected] We will respond as quickly as possible to your report. We request that you not publicly disclose the issue until it has been addressed by kerpay.