Security & compliance
Flywire undergoes an annual SOC II and PCI DSS review to help ensure that Flywire handles customer data securely and in compliance with all applicable laws, including, but not limited to, GDPR, PIPEDA, FERPA, GLBA and other data protection law so you can feel confident in the security of your transactions.
Flywire also maintains robust anti-financial crimes compliance programs as required by our global regulators to ensure our business complies with regulations where we operate.
Some of the measures we take for your unwavering protection
Defense in Depth
On-going vulnerability scanning
Application firewall
Input validation
Annual penetration test
Annual SOC II security audit
Third party attestations
Annual PCI DSS external review
Certifications
PCI
Level 1 Certification with third-party attestations.
SOC 2 Type II
Supporting our information management process.
NACHA
Affiliate member
HITRUST
Global Registry of Service Providers
Certified WCAG 2.1 AA
Security, Trust, Assurance, and Risk Registry
Privacy of consumer financial information
