Security & Data Handling

Payment and data security should always be a priority. On this page, you will find detailed information about our security measures and our approach to processing and sharing your data.

We provide an overview of our security features and our commitment to data privacy. Additionally, we offer insights into our licensing and the management of data across different licenses.

Noda Security

Noda’s strategy for building an information security program involves a dual approach. Firstly, we focus on robust security for our own systems and servers. Secondly, we implement a multilayered security approach to ensure the highest level of safety for both your data and the data of your clients. Find the key features of our security programme below.

Use of Cloud Infrastructure Providers

Noda uses cloud infrastructure to build our applications and services. Modern cloud service providers are some of the most secure globally, investing millions of dollars to ensure the highest safety standards. Plus, they continuously upgrade and refine their systems to make them even more impenetrable and secure.

Working with well-known global providers of cloud infrastructure security is the key factor for building Noda’s information security programme.

Data Encryption Approach

Noda encrypts all sensitive data simultaneously on two layers. We use the Transport Layer Security (TLS) protocol when information is transferred between network servers, and we apply the Advanced Encryption Standard (AES) when the data is stored.

Utilising this two-layered encryption approach enables us to minimise potential safety concerns as sensitive data remains encrypted even on those rare occasions when one of the components is compromised.

Automated Alerts System

Our automated alert systems allow us to respond instantly to the threats occurring at night, on weekends, on public holidays, or during other non-working hours.

24/7 Tech Support Team

Noda's round-the-clock support team swiftly resolves connectivity issues for specific clients and also collects suggestions for improving Noda's systems. We are always here and ready to help.

Certification

Noda regularly obtains relevant certifications and maintains up-to-date PCI DSS and PCI SSLC licenses. Payment Card Industry Data Security Standard (PCI DSS) is the industry benchmark aimed at reducing payment fraud by enhancing data protection controls.

Meanwhile, the PCI Secure Software Lifecycle Standard (PCI SLLC) ensures that payment software vendors incorporate security throughout the software development lifecycle, producing applications that are secure by design and robust against attacks. These licenses are administered by the PCI Security Standards Council (PCI SSC).

MFA

At Noda, we understand that achieving maximum information security requires focusing on both external and internal environments. That's why we implement Multi-Factor Authentication (MFA) for our employees to access all critical internal platforms.

MFA adds an extra layer of authentication, which helps prevent unauthorised access to data through internal systems.

Information Security Team Monitoring

All components of Noda’s products, including Noda API, are being continuously monitored and inspected by our IT security team.

This team consists of IT experts who regularly attend professional conferences and engage in ongoing education within their field.

Bug Bounty Program

Our bug bounty program welcomes any developers who identify as a hackers. If you or your colleagues discover any flaws, shortcomings, or vulnerabilities in our security systems or have suggestions to enhance the functionality of Noda API endpoints, you can participate in our program and receive a reward.

To report an issue or make a suggestion, simply email our security team at security@noda.live. The reward amount varies based on the severity of the shortcoming or vulnerability.

Noda Handles Your Customers’ Data

At Noda, we care about your customers and process their data with the utmost care. Here’s what happens when your customers make a payment or onboard via our services.

Insert IBAN for manual payment

Large picture
1
The buyer initiates the payment and completes authentication by their chosen bank.
Large picture
2
When the authentication by the bank is finalised, the bank requests transaction confirmation.
Large picture
3
After the confirmation, Noda receives the user’s account number as well as the amount and the currency of the payment.
Large picture
4
Consequently, this data can be used as input values for Noda’s internal algorithms and it can be shared with merchants to confirm that the payment was successful.

FAQ

Is Noda secure?

Yes, Noda is secure. As previously mentioned, Noda is designed not only to be safe but also to continuously monitor its security levels. We employ a multi-layered approach to significantly reduce the risks of hacking and data breaches. For instance, we utilise leading encryption protocols, top-tier cloud infrastructure providers, multi-factor authentication, and conduct around-the-clock comprehensive monitoring of our services.

Is Noda safe?

Yes, Noda is safe. Thousands of end consumers trust Noda to securely make payments through their preferred banks, where they confidently store their money. Noda never shares consumer data without their explicit consent. Simultaneously, we take every measure to ensure their data is protected at every step.

What data can Noda access and share?

How do I know open banking is safe?

I have an issue with Noda’s services; who can I contact?

capterra

Products

Open Banking PaymentsCard PaymentsCheckout FormNo-code Payment PageInstant Payment LinksBank PayoutsCard PayoutsKnow Your WhalesSign in via Bank

Use Cases

Merchant of RecordTravel & TourismE-CommerceSaaSRetailMarketplacesEducational PlatformsOnline Gaming

About

CompanyWho We AreWhy Open Banking?Security & Data HandlingLegal & PrivacyRisk and AML/CFT PoliciesUX ApproachPartnershipWhite Label Partners

Developers

Tech DocumentationOpen-Banking DemoNoda Plugins

Other

PricingArticlesGlossaryMarketplace
© 2024 Noda. All Rights Reserved
service provider badgepartner8.svgpartner2.svgpartner3.png

NAUDAPAY LIMITED, (Company Number: 11741664) with the registered address: 37th Floor, Office 37.38, 1 Canada Square, Canary Wharf, London, United Kingdom, E14 5AA is an authorized Payment Institution and regulated by the Financial Conduct Authority (FCA) (Reference number: 832969) under the Payment Services Directive ((EU) 2015/2366)