Security at SpaySecure
We take the security of your data seriously. SpaySecure uses industry-standard safeguards to protect the information entrusted to us by breeders, buyers, and partners.
Data Encryption
All data transmitted between your browser and our servers is encrypted in transit using TLS. Sensitive data is encrypted at rest.
Infrastructure
Our platform is hosted on secure, professionally managed cloud infrastructure with physical and network security controls, redundancy, and continuous monitoring.
Access Controls
Access to customer data is restricted to authorized personnel on a need-to-know basis.
- Passwords are stored only as one-way hashes, so no one at SpaySecure can read them.
- Buyers do not have passwords. They act through cryptographically random signing links, each tied to a single contract, with SMS or email verification codes required before sensitive steps.
- We use role-based permissions, strong authentication, and logging of administrative access.
Application Security
We follow secure development practices, apply security patches promptly, and regularly review our systems for vulnerabilities.
Payment Information
Payments are processed by Stripe and PayPal, both PCI DSS Level 1 certified processors. We never receive or store full card numbers. Where a contract requires identity verification, we use Stripe Identity. See our Privacy Policy for how identity verification data is handled.
Subprocessors
We rely on a small number of outside providers to operate the service. Each is bound by contract to safeguard your information and use it only to deliver its service to us. The links below go to each provider's own privacy policy and terms.
- Vercel: Privacy · Terms
- Neon (Databricks): Privacy · Terms
- Stripe: Privacy · Terms
- Cloudflare: Privacy · Terms
- Resend: Privacy · Terms
- Twilio: Privacy · Terms
- DocuSign: Privacy · Terms
- Dropbox Sign (legacy): Privacy · Terms
- Anthropic: Privacy · Terms
- Dialpad: Privacy · Terms
- PostGrid: Privacy · Terms
- Google: Privacy · Terms
Incident Response
We maintain procedures for detecting, responding to, and recovering from security incidents. If an incident affects your data, we will notify you as required by applicable law.
Questions
If you have security concerns or wish to report a vulnerability, contact us at security@spaysecure.com.
Last reviewed: July 2026