ISO/IEC 27001:2022 Certified by Insight Assurance

Trust & security

Payaca is certified to ISO/IEC 27001:2022, the international standard for information security management, by Insight Assurance. The Payaca Trust Center has the detail on our security controls, and it is where you can ask for our security documents.

Visit the Trust Center

ISO/IEC 27001:2022 certified

ISO 27001 is the international standard for information security management, published by the International Organisation for Standardisation (ISO) and the International Electrotechnical Commission (IEC).

Independent audits

Our security practices are regularly audited by independent certification bodies to ensure ongoing compliance.

Continuous improvement

ISO 27001 requires ongoing monitoring and assessment. We continuously improve our security posture.

Risk management

Systematic identification and mitigation of security risks across all business operations.

How we protect your data

Security is built into every aspect of our platform, from development to deployment.

Data encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.

Access controls

Role-based access controls ensure users only see information relevant to their responsibilities.

Vulnerability testing

Regular penetration testing and vulnerability assessments by independent security experts.

Business continuity

Comprehensive disaster recovery planning with tested procedures to maintain service availability.

Staff training

Comprehensive security awareness training for all team members, with regular updates on emerging threats.

Vendor security

Rigorous security requirements for all third-party vendors and service providers.

Data protection & compliance

We take data protection seriously and comply with all relevant regulations.

GDPR compliant

Full compliance with UK GDPR and the Data Protection Act 2018

Data processing agreements

A data processing agreement with every customer

Right to erasure

Complete data deletion upon customer request

Data portability

Export your data at any time in standard formats

See Payaca in action

Join leading clean tech installers who trust Payaca with their business operations and customer data.