Methods Security

Audits

We're audited annually for our compliance with the Payment Card Industry (PCI) Data Security Standards (DSS). We're audited as a Level I Service Provider (the highest level). This involves penetration tests, architecture reviews, background checks, and policy verification. You can view our Attestation of Compliance here.

We're also audited annually for our compliance with the System and Organization Controls 2. This requires information security reviews, disaster recovery tests, change management standards, intrusion detection, and vulnerability management. You can view our Type 2 audit here.

Encryption

All data are stored with disk-level encryption. Certain data (tax ID numbers, for example) are additionally encrypted at the application level using AES 256.

HTTPS is enforced on all API requests.

Viral Instinct Inc. d/b/a Methods / Methods Cash — Delaware C-Corp