Keeping your data secure & ensuring compliance

Rainforest removes the headache of securing your online payments, while reducing your team’s regulatory and compliance burden. We’ve demonstrated our commitment to security by becoming PCI DSS Level 1 certified and hosting our platform on AWS.

We ensure the privacy 
& safety of your data

Rainforest removes the headache of securing your online payments, while reducing your team’s regulatory and compliance burden. We’ve demonstrated our commitment to security by becoming PCI DSS Level 1 certified. Our platform is also hosted on AWS.

End-to-end encryption

Rainforest encrypts your data end to end, from the point of receipt at the user interface level, until it exits in our systems and is processed by our 3rd party payment gateway partners.

Data encryption everywhere

Data is encrypted in transit at all stages of data transmission and processing, including between services within our internal networks. Payment card information is encrypted at rest, at the row level within our production databases.

Payment tokenization

Rainforest implements payment tokenization to further reduce the risk of Primary Account Numbers (PAN) exposure in plaintext as part of data processing.

High availability, globally managed — our platform

Rainforest Pay lives on Amazon Web Services (AWS), using globally available services across multiple regions to ensure maximum updates and high performance — regardless of where your customers are doing business.

DDoS mitigation

Distributed Denial of Service protection is available on all Rainforest services.

Backup and restore

Data is snapshotted and continuously backed up, separate from production datasets.

Best-in-class uptime

Through the use of AWS-based platforms and infrastructure, we can provide status updates on our services and platforms.