Security Policy

FMPay is a payment services provider and security is our top priority and keep our customers’ transaction data secure at all times Last update: February 11th, 2021. Version: 1.1

Transaction Security

All transaction information passed between merchants’ websites and FMPay’s systems is encrypted using 128-bit SSL certificates. Cardholder information is never allowed to pass unencrypted and any messages sent to your servers from FMPay are signed using the most advanced hashing tools to prevent tampering. We never display cardholders’ information in our reporting system.

Encryption and Data Storage

All transaction information passed between merchants’ websites and FMPay’s systems is encrypted using 128-bit SSL certificates. Cardholder information is never allowed to pass unencrypted and any messages sent to your servers from FMPay are signed using the most advanced hashing tools to prevent tampering. We never display cardholders’ information in our reporting system.

System security

FMPay is audited annually under Payment Card Industry Data Security Standards (PCI DSS) and a fully approved Level 1 payment services provider. Our compliance to PCI DSS is validated by independent designated assessor. In addition we perform regular tests and employ external auditors to test our security standards.

Links to payment systems and financial institutions

FMPay has numerous links to the banking network that are isolated from publicly accessed networks and we utilize dedicated leased circuits backed up with ISDN lines and in some cases VPN connections over the internet.

Internal security

All sensitive data on our servers is secured using the industry’s best standards and practices including internationally recognized 256-bit encryption technology.

Staff validation

All employees at FMPay are checked for criminal records via Disclosure and Barring Service (DBS) check prior to employment. Unauthorized individuals have no access to sensitive data or able to decrypt transaction information or data.Senior management can get a temporary access to some data during some extenuating circumstances such card fraud investigation by law enforcement.

Disaster recovery

FMPay operates on infrastructure of highly resilient data centers based in the EU to ensure optimal system security and uptime. FMPay has in place a complete and detailed disaster recovery and business continuity policy to ensure uninterrupted and secured operations for our customers.