Our payment processing system has been audited by a PCI-certified auditor, and is certified to PCI Service Provider Level 1. This the most stringent level of certification available.
SSL and Encryption
Srvd features several layers of high-level encryption and authentication to process orders securely. We pass information only through http connections, and all card numbers are encrypted on disk with AES-256. Our infrastructure for storing, decrypting, and transmitting card numbers runs in a separate datacenter, and doesn't share any credentials with our primary app or services.
We rely on a robust tokenization service to safely store your credit card details on a reliable 3rd-party site. Tokenization is a neat way of saying "data substitution". It is the act of using a substitute value, or token, which has no inherent value, in the place of data that does have value.
Therefore, your personal information is never stored on this mobile device. If your phone were to be lost or stolen, only your tokens would be compromised, not your actual card data.