Security & Compliance

Designed around controlled and responsible operations.

Our technology and operational processes are designed with security, privacy and compliance considerations from the outset.

Information security

Secure development principles and controlled change processes
Access management and least-privilege design
Encryption considerations for data in transit and at rest
Environment separation for development, testing and production
Logging, monitoring and operational observability
Incident handling and escalation procedures

Privacy

Data minimisation and purpose limitation
Lawful processing considerations under UK GDPR
Support for data subject rights requests
Careful use of processors and third parties

See our Privacy Policy for website-related processing details.

Partner due diligence

Evaluation of relevant technology and payment partners
Clear contractual allocation of responsibilities
Recognition of regulated service dependencies
Sanctions and jurisdiction considerations in partner review

Business continuity

Infrastructure resilience planning
Backup and restoration considerations
Incident response and service restoration processes

Responsible operations

No misrepresentation of regulated status
No support for unlawful activity
Acceptance and engagement subject to review
Cooperation with authorised partners where required

Important boundaries

The architecture is being developed with recognised security and payment industry standards in mind. AQPAY does not currently claim PCI DSS, ISO 27001, SOC 2 or FCA authorisation on this website. Certification badges are not displayed unless AQPAY has the right to do so.

AQPAY LTD is a technology company providing payment infrastructure, software integration and related technical services. AQPAY LTD does not hold, safeguard or settle client funds unless expressly stated in a separate agreement and permitted under the applicable regulatory framework.

Compliance contact: compliance@aqpay.co.uk

Security contact: security@aqpay.co.uk