Payment security
Sola is PCI DSS compliant. Card payments run 3D Secure 2, with frictionless authentication where the issuer allows it.
Cards are tokenized, so raw card data stays out of your systems and out of your logs.
Data protection
Processing is GDPR compliant, and data is processed in the EEA.
PLACEHOLDER: confirm data residency wording with legal.
Platform practices
- HMAC-signed API requests
- IP allowlisting
- Two-factor authentication on the dashboard
- Role-based access
Funds and settlement
PLACEHOLDER: legal entity, safeguarding and settlement description pending legal sign-off.
Questions about security? Talk to us.