Security & Compliance

• SOC 2 practices and ISO 27001 alignment
• NACHA compliant ACH operations
• TLS 1.2+ with HSTS (includeSubDomains; preload)
• CSP, XFO, XCTO, Referrer‑Policy, Permissions‑Policy, COOP/CORP/COEP
• Signed webhooks; tokenized bank data