Security & Trust

PayLayer is built on enterprise-grade infrastructure to keep your business and your customers safe.

Stripe Elements & PCI

PayLayer is not the card data store. We rely entirely on Stripe Elements for secure payment collection. Sensitive card and bank details are handled inside Stripe's PCI-compliant environment and never touch our servers.

Direct payouts

We use Stripe Connect to route funds directly to your bank account. PayLayer never holds your money in transit. Settlement happens on Stripe's standard schedule for your account.

Encryption & TLS

All data transmitted to and from PayLayer is encrypted in transit using industry-standard TLS. Dashboard access is secured via Clerk authentication.

Data minimized

We store only what we need to run your dashboard: payment amounts, customer names, reference numbers, and page configuration. Stripe stores the actual payment credentials.

Healthcare practices

PayLayer is a payments layer on Stripe. Card data is handled in Stripe's PCI environment. We do not replace your HIPAA program. If you need a BAA, contact us.

Learn more about Stripe's security practices.

For security incidents, please contact security@usepaylayer.com.