Security & Compliance
We aim for SOC 2 alignment and leverage Stripe for secure card and identity data handling.
Fraud Prevention
Where payments are enabled, Stripe tooling and ALS dispute records support transaction review.
VAT Compliance
Tax and receipt handling runs only in enabled payment flows and follows the applicable launch configuration.
Copyright Compliance
Published notice, takedown, and counter-notification routes support copyright reports.
AML/KYC
Identity verification is handled through the configured payment provider where an enabled workflow requires it.
Payment Security Boundary
All payment data is processed by Stripe, a PCI DSS Level 1 certified service provider.