Security & Trust

Information Security

Cardfornia is built by a team certified to the ISO/IEC 27001 information security management standard. The same core team applies the security management practices of that system to the architecture and operation of this project.

Our Security Foundation

Certified Team

ISO/IEC 27001 Certified Team

Cardfornia is built by a team certified to the ISO/IEC 27001 information security management standard, with an established and independently audited management system behind it.

Same Core Team

The Same Practices Applied

The same core team applies the security management practices of that system to the architecture and day-to-day operation of this project.

Continuity

Consistent Standards

Access control, data handling, change management and incident response all follow the same documented standards the team already works to.

How We Work in Practice

Access

Least-Privilege Access

Role-based access control, multi-factor authentication and periodic access reviews across every production system.

Data

Encryption Everywhere

Data encrypted in transit and at rest; card credentials and personal data handled through tokenised, minimum-exposure flows.

Operations

Change & Incident Discipline

Reviewed and logged change management, continuous monitoring, and a documented incident response process with defined escalation paths.

Card Data

PCI DSS Certified Partner

Card data is processed through a partner holding a current PCI DSS v4.0.1 Attestation of Compliance, independently assessed by a Qualified Security Assessor.

Need our security documentation for a vendor review? We are glad to share it.