SECURITY & COMPLIANCE

Confidentiality, integrity, and availability

Confidently scale your subscription business backed by the best security and compliance platform in the subscription industry.

Grow with confidence. Recurly has your back with world-class security and compliance built into every offering.

Safeguard all data

World-class security at work 24/7/365 to protect your—and your customers’—data. Recognized on the Visa Global Registry of Service Providers, Recurly’s PCI-DSS Level 1 compliant platform meets or exceeds all industry-standard payment security practices.

Ensure proper access

Secure and protect the application and data by using robust, configurable user access controls. Maintain a compliant, best-practices approach while ensuring those who need data access can get what they need.

Extend compliance globally

Confidently expand into new markets without compliance concerns. Our platform and practices are continually updated, tested, and enhanced to ensure our customers’ compliance with global and local mandates.

Key measures

Industry-leading data, application, and network security infrastructures with built-in adherence to global compliance mandates.

Recurly has you covered

Focus on your business—we’ve got security handled. All customer data is encrypted—at rest and in transit—and sensitive data is securely stored in tools like Google KMS. Best-in-class tools work 24/7 to secure and monitor our infrastructure and networks.

PCI Data Security Standard Level 1 compliant
Full-time advanced customer data encryption
Industry-standard web application secure coding guidelines

Learn more

Always-on reliability

Keep business moving faster—Recurly will match your pace. Built on highly scalable, industry-leading service providers such as Google Cloud, our platform allows you to scale confidently—and instantaneously—without disruption.

Industry-leading platform tools
Reliable and scalable
Grow globally without platform changes

Robust access controls

Ensure proper access with configurable user roles and permission controls that fit the way you work. Recurly works behind the scenes to enforce and audit access with SAML, SSO, and audit logs.

Two-factor authentication
Secure single sign-on (SSO)
Robust and flexible user controls

Global compliance

Wherever you grow, we know the rules. We’re SOC II Type 2 and PSD 2 compliant and meet CCPA and GDPR requirements. We engage third party auditors and pentesters to ensure the highest quality standards.