Built to keep your business safe
Here is exactly how we protect your account, your customers and your payments — no buzzwords.
Encrypted in transit (TLS)
All traffic between your browser and Kinetic Pay is encrypted with HTTPS/TLS.
Card data handled by Stripe
Card payments are processed by Stripe, a PCI DSS Level 1 certified provider. Full card numbers are entered into Stripe-hosted fields and never touch or get stored on our servers.
Hashed passwords
Account passwords are hashed with bcrypt before they are stored. We never store or can read your plain-text password.
Secure sessions
Sign-in sessions use signed tokens stored in httpOnly cookies, which cannot be read by JavaScript running in the page.
Role-based access
Team members get roles so that people only see and do what their job requires. Employees ring up sales using their own PIN.
Encrypted bank details
Sensitive bank account details you save in settings are encrypted at rest using AES-256-GCM.
Found a security issue?
Please report it to support@kineticpay.com. You can also read our PCI compliance overview and Privacy Policy.