Security & Privacy
Card numbers are captured by the payment processor and never reach Cord’s servers; secrets are encrypted with AES-256-GCM, passwords are stored with Argon2id and each organization is isolated from the others. Here you’ll also see what data is kept and for how long, and how to report a vulnerability.
PCI-DSS compliance
Cord never stores or processes card numbers: the certified processor tokenizes them in its own form and Cord only receives a payment identifier.
Data retention and privacy
Our policies regarding the handling and deletion of your customers' financial data.
Report vulnerabilities
How to report a security issue in Cord and what you can expect from us.
Non-Disclosure Agreements (NDA)
How Cord protects the confidential information in your most sensitive deals.
Security for compliance teams
Which security controls Cord has and how to request information for a questionnaire or vendor review.
Still have questions?
Don't worry, our expert team is an email away to solve any issue.