How PaymentsNow keeps your cheque issuance and document fulfillment secure and compliant — at every stage.
At PaymentsNow, every cheque and document is treated as a high-stakes transaction. We engineered our fulfillment process with security and compliance at its foundation, protecting your information from the instant it’s submitted through to confirmed delivery. The platform is built around SOC 2 and HIPAA standards, runs on secure AWS cloud infrastructure, and is reinforced by strict physical, technical, and procedural safeguards.
Sensitive information is masked or redacted whenever it’s displayed or transmitted, in line with best practices for secure payment handling.
Certifications, encryption, and tightly controlled facilities work together to keep your payments safe.
All platform traffic travels over TLS 1.3, and we run regular vulnerability scans and penetration tests following OWASP guidance. Sensitive data is encrypted with AES-256 and our encryption keys are rotated on a routine schedule. Personal and business-sensitive information is handled responsibly and confidentially at every step.
Our fulfillment centre follows industry-standard security protocols, under round-the-clock monitoring, and personal devices are banned from the production floor. Every cheque leaves on tamper-resistant stock, and each payment is followed from the press to the recipient’s mailbox. Positive Pay files and detailed completion reports add further verification so you can monitor each step with full transparency.
As a HIPAA-aligned cheque printing and mailing partner, we’ve completed a rigorous program to meet the rules governing the security, privacy, and integrity of protected health information. That includes encryption, secure storage, and regular audits — plus a Business Associate Agreement (BAA) that spells out our obligations to safeguard sensitive data on your behalf.
For any organization outsourcing cheque printing and mailing, SOC 2 Type 2 is a deciding factor. Our attestation verifies we meet the five trust principles — security, availability, processing integrity, confidentiality, and privacy. In practice, our systems are guarded against unauthorized access, kept available per our service commitments, and run complete, accurate, timely, authorized processing, while confidential and personal data is protected to the standards set out by the AICPA and our privacy notice.
Operations align with SOC 2 Type 2 and ISO 27001 practices, and personal information handling follows PIPEDA. Data is encrypted with AES-256 at rest and TLS 1.3 in transit.
Account details are collected once, for cheque template setup only, then stored encrypted with field-level masking. Role-based permissions control who in your team can see or approve what — and we never hold or move funds.
Production runs in a monitored facility with personal devices banned from the floor, blank security stock under locked custody, and every void or spoiled cheque logged and destroyed under dual control.
Your first five cheques are free, with no monthly fee and nothing to pre-pay.