The TerraPay Security Hub

Securely connecting a growing global money movement network of 3.7Bn+ mobile wallets and 7.5Bn+ bank accounts across 150+ countries.

Every payment, protected

Compliance, security, and transparency are at the heart of everything we do at TerraPay. Armed with industry-leading security standards, applying rigorous controls, and a compliance-first approach, we safeguard your data and transactions across our global money movement network.
Regulated in 31 global markets, TerraPay maintains the highest levels of security certifications including ISO 27001:2022, PCI DSS Level 1 v4.0.1, and SOC 2 Type II. From global compliance to data protection to real-time transactions monitoring, we are always strengthening our infrastructure, processes, and teams to ensure that every payment on our network is fully protected.
  • Certifications
  • Compliance
  • Monitoring

ISO 27001

Version 2022

PCI DSS level 1

Version 4.0.1

ISO 27701

Version 2019

ISO 22301

Version 2019

SOC 2 Type II

Current

CSA STAR LEVEL 1

Current

SWIFT CSP

Current

Cyber Essentials

UK Certified

  • TerraPay is PCI DSS v4.0.1 Level 1 certified, the highest level of certification in the payment card industry
  • TerraPay is licensed across multiple jurisdictions with 30+ additional regulatory approvals, globally
  • We implement robust privacy frameworks compliant with the General Data Protection Regulation (GDPR)
  • With robust AML/CFT programs built-in, we ensure the safety of cross-border transactions across all markets we operate in
  • Our 24/7 Security Operations Center provides continuous monitoring, threat detection, and rapid incident reporting and response to protect every payment on our global payment network.
  • With real-time transaction monitoring, automated alerting and monitoring systems, we maintain a comprehensive, tested incident response plan aligned with ISO 27001 and PCI DSS.

Built to protect
global money movement at scale

Powered by an in-depth, multi-layered approach to security.

Strong line of defence

Multiple layers of security controls protect against evolving cyber threats with firewalls, IDS/IPS, and real-time monitoring to prevent fraud and breaches.

Enterprise encryption

Strong encryption for data at rest and in transit, with Hardware Security Module key management.

24/7 monitoring

Dedicated Security Operations Center providing continuous threat detection and rapid incident response to eliminate security-related failures.

Regular testing

We follow a continuous security testing program to proactively identify and address potential risks. This includes ongoing vulnerability assessments, periodic penetration testing, ASV scans, and red team exercises to validate the effectiveness of our security controls and ensure a strong security posture.

Compliance in our DNA

Our commitment to fostering a culture of compliance is reflected in continuous employee education, robust secure coding standards, and regular independent audits and programs ensuring alignment with industry best practices.

The world’s most trusted names trust TerraPay