Albi is committed to ensuring secure payment processing with Albi Pay. Sensitive data is encrypted from the moment of entry, using hosted fields that remove our system and your network from directly handling card data.
We have carefully vetted our embedded payments partner and take the security of our customers' data very seriously. While our users never need to interact directly with our payments provider—since it is fully embedded within Albi Pay—we understand and appreciate your need for transparency regarding security measures.
How Albi Pay Keeps Your Data Secure
Our payments provider, Rainforest, maintains data securely in accordance with industry standards. Their security measures undergo annual independent audits to validate compliance. Here’s how your payment data remains protected:
PCI DSS Level 1 Certified – The highest level of compliance for payment security.
SOC 2 Type 2 Compliant – Adhering to strict security and data integrity standards.
End-to-End Encryption – Customer data is encrypted from the point of entry at the user interface level until it reaches the payment facilitators’ systems.
Tokenization of Payments – Reduces the risk of Primary Account Number (PAN) exposure by replacing sensitive data with unique, secure tokens.
Strict Access Controls – All customer data is logically separated, applying the principle of least privilege and using strong cryptographic techniques.
Secure Data Storage – Sensitive data is stored in a separate, highly secure data vault with AES-256 encryption.
Encrypted Backups – All backups are secured with AES-256 encryption to prevent unauthorized access.
DDoS Protection – Safeguards all services against Distributed Denial of Service attacks.
Web Application Firewalls – Restricts API traffic over secure HTTP/S protocols to prevent unauthorized access.
At Albi, security is a top priority. With Albi Pay, you can confidently process payments knowing that your data—and your customers' data—is protected with industry-leading security measures.