Data privacy, security & compliance
Our clients and their customers trust us to move high-value, high-stakes sums of money across the globe every day in a secure and compliant way. They also trust us to aid in their compliance to security and privacy laws, standards and regulations. Both vigilance and vision is required to do our job, and we take seriously our leadership role in adhering to and informing the next iteration of data privacy and security best practices.
Data protection
Facilitating the movement of money across borders and in highly regulated industries is complex, and takes both longevity in the industry and deep roots in the industries we serve. Our dedicated compliance and risk management function, overseen by our Compliance Officer and Chief Information Security Officer with Board-level oversight, has been built over more than a decade, giving us unparalleled experience in a young fintech space. This includes robust processes for:
- Adherence to Know-Your-Customer (KYC) procedures
- Adherence to Anti-Money Laundering (AML) policies
- Filing suspicious activity reports (SARs)
Governance policies
Our global team of more than 20 data privacy and security experts has established and executes against strong data governance policies across:
- Application security
- Infrastructure security
- Cybersecurity
- Physical security
- Vendor security
- Incident response and forensic investigations
We provide notice of privacy policy and practices, and impose requirements for safeguarding and proper destruction of personal information.
Proprietary fraud detection risk engine
Flywire’s data protection policies extend across all of our lines of business, and we provide training on all these policies to all our FlyMates, including contractors. We’re constantly looking for the next threat, and to set the bar for data security and compliance in our industry. We use predictive analytics, machine learning, and artificial intelligence technologies to ease the complexities of money movement across borders while providing fast, compliant, and transparent receipt of payments. Our artificial intelligence (AI) and machine learning (ML)-enabled fraud detection risk engine has trained against millions of ACH, check, card, and wire transactions. As a result, the enhanced power of our risk engine enables us to mitigate fraud.
Certifications & compliance
The Flywire platform leverages Payment Card Industry-validated Point-to-Point Encryption tokenization and other best-in-class and regulatory-compliant security measures. We have the highest levels of certifications for our industry, as well as industry-specific data privacy and security certifications. We adhere to global laws and regulations. This is a key differentiator for our clients. These audit-tested certifications and risk program features, which in many cases apply with specificity to the verticals we serve, include:
Certifications:
Service Organization Control 2
Payment Card Industry Data Security Standard
Americans with Disabilities Act (ADA) Compliance
Compliant with:
General Data Protection Regulation in Europe
California Consumer Protection Act
Personal Information Protection & Electronic Documents Act in Canada
Family Educational Rights and Privacy Act
Health Insurance Portability and Accountability Act
National Automated Clearing House Association
flywire.com