Trust Center

PAIDD Trust Center

Enterprise-grade security for you and your suppliers

Last updated: 30 September 2026

Security
Compliance
Policies
Privacy
System Status
Security

Security

Our top priority is keeping our customers' data secure. We have stringent security measures at the organizational, architectural, and operational levels to ensure that your data and applications remain safe.

Your data is encrypted and protected across our DigitalOcean and AWS infrastructure.

  • 256-bit AES encryption for stored files
  • TLS 1.2 and 1.3 for all traffic
  • Unencrypted connections always refused

Secure, passwordless sign-in for every user.

  • One-time email codes or passkeys
  • Codes locked to the requesting session
  • Automatic session timeout
  • Rate-limited, fully logged sign-in attempts

Hosted in London (UK) and Stockholm (EU) on SOC 2 Type II certified infrastructure.

  • SOC 2 and ISO 27001 certified data centers
  • 24/7 physical security and surveillance
  • Cloud firewalls and DDoS protection
  • Regular independent security audits

Layered monitoring from our infrastructure providers and our own team.

  • Intrusion detection and vulnerability scanning
  • Regular penetration testing
  • Full audit trail of platform activity
  • Alerts on unusual sign-in activity
Enterprise Security
Compliance

Compliance

We're committed to working with partners who meet the highest standards of security and compliance.

ISO 27001 is the international standard for information security management. Our hosting partners, DigitalOcean and AWS, are both ISO 27001 certified.

We're working towards Cyber Essentials, the UK government-backed security certification, with our own ISO 27001 certification on our roadmap.

SOC 2 Type II is the leading compliance framework for service organizations handling customer data. Our hosting partners, DigitalOcean and AWS, are both SOC 2 Type II certified, with:

  • Continuous security and availability monitoring
  • Independent audits of operational controls
  • Strict access controls and data protection

PAIDD complies with the UK GDPR, the EU GDPR and the Data Protection Act 2018.

  • Lawful basis for all processing
  • Privacy built into our platform
  • Full support for data subject rights
  • Designated data protection lead
Compliance Standards
Policies

Policies

See exactly how we handle your data

Privacy Policy

Learn how we collect, use, and protect your personal information in compliance with data protection regulations.

Read Policy →

Cookie Policy

Understand how we use cookies and similar technologies to improve your experience on our platform.

Read Policy →

Data Protection

Review our comprehensive data protection measures and your rights under GDPR and UK data protection laws.

Read Policy →