Security & Data Protection
Security | Accessibility | Reliability | Honesty | Consistency
We have partnered and are affiliated with leading financial institutions to ensure that our delivery model puts data security and integrity foremost above all.
Why We are Trusted By Our Customers
Stripe as our Payment Partner
KIPPIN uses Stripe in partnership processing payments on our platform. We do not store any payment information on our servers. Stripe is a technology company with software which allows individuals and businesses to receive payments over the Internet. Stripe provides the technical, fraud prevention, and banking infrastructure required to operate on-line payment systems.
All Payments Are Processed by Stripe.
Stripe has been audited by a PCI-certified auditor and is certified to PCI Service Provider Level 1. This is the most stringent level of certification available in the payments industry. To accomplish this, we make use of best-in-class security tools and practices to maintain a high level of security at Stripe.
How we secure your banking details and transactions
KIPPIN partnered with Envestnet | Yodlee, a 3rd party financial institution to import your banking transactions.
We do not store any of your banking details or credentials. Envestnet | Yodlee adheres to leading financial industry practices for security, risk, and compliance management.
All card numbers are encrypted at rest with AES-256. Decryption keys are stored on separate machines. None of Stripe’s internal servers and daemons are able to obtain plaintext card numbers; instead, they can just request that cards be sent to a service provider on a static whitelist. Stripe’s infrastructure for storing, decrypting, and transmitting card numbers runs in separate hosting infrastructure, and doesn’t share any credentials with Stripe’s primary services (API, website, etc.).
Protecting the personal information of those who use our customers’ products and services is a top priority. Yodlee never sells consumers’ personally identifiable information (PII) to anyone. We typically receive transaction data elements in a non-identifiable form that does not contain personally identifiable information. As an additional layer of protection, we employ systems that scrub any data potentially containing PII in accordance with the highest privacy standards and industry best practices.
Migrate to a KIPPIN Platform Today
Save resources and get access to our industry-standard accounting solutions for real-time financial business insight to help grow your business