How PaymentsNow keeps your cheque issuance and document fulfillment secure and compliant — at every stage.
At PaymentsNow, every cheque and document is treated as a high-stakes transaction. We engineered our fulfillment process with security and compliance at its foundation, protecting your information from the instant it’s submitted through to confirmed delivery. The platform is built around SOC 2 and HIPAA standards, runs on secure AWS cloud infrastructure, and is reinforced by strict physical, technical, and procedural safeguards.
Sensitive information is masked or redacted whenever it’s displayed or transmitted, in line with best practices for secure payment handling.
Certifications, encryption, and tightly controlled facilities work together to keep your payments safe.
All platform traffic travels over TLS 1.3, and we run regular vulnerability scans and penetration tests following OWASP guidance. Sensitive data is encrypted with AES-256 and our encryption keys are rotated on a routine schedule. Personal and business-sensitive information is handled responsibly and confidentially at every step.
Our fulfillment centre follows industry-standard security protocols, with 24/7 surveillance and a strict no-mobile-device policy in production areas. Cheques are printed with high-security features, and every payment is tracked from print to delivery. Positive Pay files and detailed completion reports add further verification so you can monitor each step with full transparency.
As a HIPAA-aligned cheque printing and mailing partner, we’ve completed a rigorous program to meet the rules governing the security, privacy, and integrity of protected health information. That includes encryption, secure storage, and regular audits — plus a Business Associate Agreement (BAA) that spells out our obligations to safeguard sensitive data on your behalf.
For any organization outsourcing cheque printing and mailing, SOC 2 Type 2 is a deciding factor. Our attestation verifies we meet the five trust principles — security, availability, processing integrity, confidentiality, and privacy. In practice, our systems are guarded against unauthorized access, kept available per our service commitments, and run complete, accurate, timely, authorized processing, while confidential and personal data is protected to the standards set out by the AICPA and our privacy notice.