An important milestone in our commitment to protecting your information and building a financial platform you can trust.

We're proud to announce that Elevate Pay is now SOC 2 Type 1 compliant, following a successful independent audit conducted by Sensiba, a CPA firm specializing in SOC audits.

Every day, freelancers, remote professionals, and businesses trust Elevate Pay to receive, send, and manage their earnings. That trust extends beyond money to the personal and financial information they share with us.

Protecting that information has always been a priority. Achieving SOC 2 Type 1 compliance is an important step in demonstrating that our security practices are backed by independent assessment.

What is SOC 2 Type 1?

SOC 2 (System and Organization Controls 2) is a widely recognized auditing framework developed by the American Institute of Certified Public Accountants (AICPA).

It evaluates how organizations manage security and other applicable controls designed to protect customer information.

A SOC 2 Type 1 audit examines whether an organization's relevant security controls are appropriately designed at a specific point in time.

What makes this important is the independent assessment. Rather than relying solely on a company's own security claims, an external auditor examines the relevant systems, policies, and controls and provides an independent opinion.

What does this mean for Elevate Pay customers?

When you open an Elevate Pay account, you share sensitive information with us, including identity documents, banking details, and financial records.

You rely on us to handle that information responsibly, whether you're receiving your monthly salary, getting paid by an international client, or managing business payments.

Our SOC 2 Type 1 compliance provides additional assurance that the design of our security controls has been independently assessed against recognized criteria.

It also gives businesses and partners greater transparency into our security practices when evaluating Elevate Pay as a financial services provider.

Importantly, you don't need to change anything about how you use Elevate Pay. This milestone adds independent assurance to the security practices supporting our platform.

How we protect your information

Protecting customer information requires more than secure technology. It also depends on how data is collected, accessed, stored, shared, and handled by the people responsible for it.

That's why our approach to information security covers both our technical infrastructure and the internal practices our team follows every day.

1. Encryption to protect sensitive information

We use encryption to protect sensitive customer data while it's stored and transmitted between systems.

This helps prevent unauthorized parties from reading personal information, banking details, and other sensitive records.

2. Strict access controls and data governance

Not everyone at Elevate Pay needs access to your information, and access is restricted to authorized personnel.

We maintain internal controls governing how customer information is collected, used, accessed, shared, and retained.

These safeguards help ensure that sensitive information is handled responsibly across our operations, from managing financial records to responding to customer support requests.

We follow documented data retention practices based on the type of information, the purpose for which it was collected, and applicable legal and regulatory requirements. Our Privacy Policy outlines how long different types of customer information, including transaction records and identity documents, are retained.

3. Security training for every team member

Protecting customer information is everyone's responsibility at Elevate Pay, not just our engineering or security teams.

Every member of our team receives training on handling personal and financial information securely. We reinforce this through periodic training on data privacy, information security, and responsible data-handling practices.

This helps our team recognize potential risks in everyday activities, including accessing customer records, sharing sensitive information, and communicating with customers.

After all, strong encryption and secure infrastructure are only part of the equation. The people handling sensitive information must also understand their responsibilities and follow the right practices.

4. Account security and fraud prevention

We use multiple layers of protection to help secure your account and transactions, including:

• Two-factor authentication (2FA) for account logins.

• One-time passwords (OTPs) for transaction verification.

• Fraud monitoring to help identify suspicious activity.

These measures are designed to reduce the risk of unauthorized access and fraudulent transactions.

5. Responsible collection and sharing of information

We collect and use personal information to verify identities, provide financial services, process payments, prevent fraud, improve our services, and meet legal requirements.

Where necessary, we share relevant information with banking partners, payment service providers, verification providers, and regulatory authorities.

We limit these disclosures to the information necessary for the relevant purpose and do not share personal information with third parties for marketing without your explicit consent.

You can also request access to your information, ask for corrections, or request deletion where permitted by law.

You can learn more about how we collect, use, store, and protect your information in our Privacy Policy.

Our commitment to security continues

Achieving SOC 2 Type 1 compliance is a significant milestone, but security isn't a one-time exercise.

As Elevate Pay expands into new markets, supports more businesses, and introduces new financial products, we'll continue investing in the systems, processes, and safeguards that protect our customers.

That includes continually improving how we manage customer information, maintaining strong internal security practices, and ensuring our team stays informed about evolving security and privacy risks.

Our goal is simple: make global financial services more accessible while maintaining the security and trust our customers expect.

For businesses and partners interested in learning more about our security practices, our SOC 2 Type 1 report is available upon request, subject to appropriate confidentiality arrangements.

For questions or requests, contact us at help@elevatepay.co.

Thank you for trusting Elevate Pay. We'll continue working to earn that trust every day.