Your Data Deserves
Enterprise-Grade Protection
We don't just build software—we build trust. SOC 2 Type II certified, GDPR compliant, and backed by security practices that protect billions of dollars in transactions.
Compliance & Certifications
We've invested heavily in compliance so you don't have to worry. Our certifications are independently audited and continuously maintained.
SOC 2 Type II
Independently audited for security, availability, processing integrity, confidentiality, and privacy.
GDPR
Full compliance with EU General Data Protection Regulation. Data processing agreements available.
CCPA
California Consumer Privacy Act compliance for US customer data protection and privacy rights.
PCI DSS
Payment Card Industry Data Security Standard compliance for secure credit card processing.
TCPA
Telephone Consumer Protection Act compliance for all SMS and voice communications.
HIPAA
Health Insurance Portability and Accountability Act compliance available for healthcare customers.
Security Architecture
Defense in depth. We protect your data at every layer—from network to application to database.
Data Protection
- AES-256 encryption at rest
- TLS 1.3 encryption in transit
- Customer-managed encryption keys (BYOK)
- Automated data classification
- Data loss prevention (DLP)
Access Security
- Role-based access control (RBAC)
- Single sign-on (SSO) via SAML 2.0
- Multi-factor authentication (MFA)
- IP allowlisting
- Session management & timeouts
Infrastructure
- AWS & GCP hosting (SOC 2 certified)
- Multi-region data replication
- Automated backups with PITR
- DDoS mitigation
- WAF protection
Monitoring & Response
- 24/7 security operations center
- Real-time threat detection
- Automated incident response
- Security event logging
- 90-day audit log retention
Data Residency Options
Choose where your data lives. We offer multiple data center options to meet your regulatory and compliance requirements.
United States
Primary data centers in US-East and US-West regions
Default RegionEuropean Union
Frankfurt and Dublin data centers for EU data sovereignty
Available on RequestAsia-Pacific
Sydney data center for APAC compliance requirements
Enterprise OnlySecurity Resources
Everything your security and procurement teams need to evaluate Chargezen.
SOC 2 Type II Report
Our most recent independent audit report. NDA required.
Security Whitepaper
Comprehensive overview of our security architecture and practices.
Vendor Security Questionnaire
Pre-filled SIG Lite and CAIQ responses for your procurement team.
Data Processing Agreement
Standard DPA with EU Standard Contractual Clauses.
Penetration Test Summary
Executive summary of our annual third-party penetration test.
Sub-Processor List
Current list of third-party sub-processors who handle customer data.
Bug Bounty Program
We reward security researchers who help us find and fix vulnerabilities. Rewards range from $100 to $10,000 depending on severity.
Questions About Security?
Our security team is available to discuss your compliance requirements, answer questionnaires, and schedule security reviews.
