Privacy and Security
We take our privacy and security responsibilities to you and your customers extremely seriously.
Cloud security is the highest priority; we fully appreciate that the data shared with is of the upmost sensitivity. Our chosen cloud hosting partner is Amazon Web Services, by partnering with AWS we can ensure we are operating on data centre and network infrastructure that is built and maintained by security experts.
All data is stored in the AWS London region.
It goes without saying that all communications with the PayRun.io APIs and portals is over a secure channel (HTTPS) and ensured by HTTP Strict Transport Security.
To provide third party assurances and verifcation that our systems are secure we conduct regular penetration tests using external consultants.
You can download our latest test results here conducted in May 2020.
As a data processors of sensitive personal information PayRun.io Limited is required to be registered with the Information Commissioner's Office on the Data Protection Register. You can confirm our registration details at any time on the ICO website here https://ico.org.uk/esdwebpages/search, our registration number is: ZA283680
PayRun.io Limited is fully compliant with the upcoming GDPR legislation that comes into full effect May 2018. Please refer to section 10 of Service Access Terms and Conditions for full details.
ISO 27001 is an internationally recognised standard in Information security management systems. PayRun.io Limited is aggressively pursuing accreditation which we hope to have by early next year.