How secure is GiftPay?
You can be confident about the security of the GiftPay platform and any data you entrust us with.
User Accounts
GiftPay offers Two Factor Authentication as an option. If required for your team, we can also enforce mandatory 2FA by request.
GiftPay supports Single Sign On (SSO) if you require it. Learn more
Data Storage
Our web site and data storage is hosted in a secure data centre operated by Equinix in Mascot, NSW Australia. Equinix holds relevant security and quality certifications including ISO 27001, ISO 9001, ISO 22301, PCI DSS, SOC 1 Type II and SOC 2 Type II. For more information visit https://www.equinix.com/data-centers/asia-pacific-colocation/australia-colocation/sydney-data-centers/sy2
Encryption
We employ TLS 1.2 to ensure all data in transit is encrypted.
Penetration Testing
We regularly engage a third party to conduct penetration testing against our website and systems. Report available on request.
Data Privacy
Your data is handled according to strict policies and controls.
:::tip Did you know? GiftPay offers gift delivery methods that don’t require you to share your customer data with us, such as Printed Vouchers and Gift URLs. Learn more
:::
We may use third party data processors depending on your location and your usage of GiftPay. These may include Sendgrid, Zendesk, Stripe, Airwallex, Azupay and Ordopay. For more information on third party data processors please contact us.
Further information on our security and privacy practices, including our full Information Security Policy, Risk Management Policy, DR Policy, IR Policy, Access Management Policy and other controls and policies are available on request.