Security is at the core of what we do
How we protect our customers
We encrypt our customers' data — from login to logout — using the highest encryption standards available, including 256-bit SSL encryption. That’s the same technology banks use to keep your account information safe.
Industry Standard Security
DailyPay utilizes all available security integrations to protect your data and promote best practices.
State-of-the-art encryption technology
Your data is transferred with high-grade TLS and multi-layered encryption at rest with AES-256 — the industry-standard for commercial applications. Encryption keys are stored separately from the data, and it’s all hosted in our off-site, secure cloud infrastructure.
Data center security
Our server hosting locations are physically secured, staffed 24 hours a day, 7 days a week, 365 days a year by trained security guards who’ve undergone a thorough auditing process.
Access to sensitive data requires two-factor authentication and is restricted only to authorized personnel
Every day, our in-house security team reviews every security aspect of DailyPay
3rd party testing
Our site and API are subjected to independent, ongoing penetration testing, security scans, and threat detection
Real-time audit log
We also keep a real-time audit log of all data access and changes made by administrators, customers, employees and our automated system
Physical Headquarters Security
Our New York headquarters is secured by G4S Security, the world’s leading global, integrated security company. With over 570,000 employees worldwide, we are also honored to be able to provide the DailyPay benefit to their valued employees.
High availability infrastructure
Our system spans numerous physical locations, with N+1 or greater redundancy to establish resilience for all components
We store backups in multiple secure locations and update them throughout the day, every day
Our technology ensures high availability of your information: 99.9% uptime (with security in mind)
If you discover a website or product vulnerability, you may contact our security team via any of the following means:
- Email: firstname.lastname@example.org
- The Keybase app: our username is dailypay (sends end-to-end encrypted messages)
- Encrypt text using Keybase’s web interface (or any other means using our PGP key), then paste it into an email