Secure by default.
Financial infrastructure is only as good as the trust placed in it. Our security program covers people, systems, data and partners, and is reviewed as our platform grows.
How we protect the platform.
Encryption
Data is encrypted in transit with modern TLS and at rest with strong encryption. Keys are managed separately from the data they protect.
Card data security
Card data is tokenised and handled in PCI DSS-compliant environments. Hosted components keep card numbers out of client systems.
Access control
Least-privilege access, single sign-on, multi-factor authentication and regular access reviews for everyone with production access.
Environment separation
Sandbox and production are isolated. Production data is never used for testing.
Monitoring and response
Continuous monitoring, alerting and an on-call incident response process with defined escalation.
Resilience
Redundant infrastructure and multi-provider routing, with backup and recovery procedures that are tested.
Vendor management
Partners and suppliers are assessed before onboarding and reviewed on an ongoing basis.
Testing
Regular vulnerability scanning, independent penetration testing and secure code review.
How funds are protected.
- Held with regulated partners. Client funds are held with regulated banking and custody partners, not on Lyria’s own balance sheet.
- Reconciled continuously. Balances are derived from the ledger and matched against partner records.
- Dual control. Payouts and configuration changes can require approval from a second user.
- Screened outflows. Payout recipients are screened against sanctions lists before funds are released.
For your due diligence.
Clients and partners under NDA can request our security documentation, including policies, our compliance attestations and answers to standard due diligence questionnaires.
Security documentation
Policies, architecture overview and current attestations, shared under NDA.
Responsible disclosure
Found a vulnerability? We welcome reports from security researchers and respond quickly.
Security questions before you commit?
Our team will walk your security and risk reviewers through how Lyria works.