Encryption
At rest & in flight
TLS 1.3 in transit. AES-256-GCM at rest. Card PAN/CVV are envelope-encrypted with column-level KMS.
256-bit
Encryption
24/7
On-call security
15 min
Incident response
Zero
Disclosed breaches
Six layers
Defense, in depth.
Every transaction passes through six independent layers of security — encryption, authentication, fraud monitoring, audit, infrastructure controls, and incident response. No single layer ever stands alone.
Authentication
Two-factor by default
TOTP and SMS/email OTP available on every sensitive action: logins, transfers, card reveal, settings change.
Fraud
Anti-fraud monitoring
Velocity checks, behavioural fingerprinting, and human review for unusual activity. 24/7 risk operations team.
Audit
Full audit trail
Every admin action and every ledger entry is recorded immutably for compliance. Seven-year retention.
Infrastructure
Defense in depth
Hardened infrastructure, segregated environments, principle of least privilege, quarterly penetration testing.
Response
24/7 incident response
On-call security engineers, 15-minute response SLA, and a published responsible-disclosure policy.
Built like a bankMoney software
Money software
is invisible
until it isn't.
Every BINKPAY product inherits the same security substrate — encryption, authentication, fraud monitoring, audit, infrastructure, and incident response. Verified end-to-end.