Everpay Trust Center
Payments is a regulated space and trust is earned with evidence. This page collects how Everpay protects card data, screens for financial crime, handles personal data and treats complaints, with links to every policy in one place.
Last updated
Security and certifications
Everpay is built around protecting cardholder data. Card details are captured through hosted and tokenized fields so merchant systems do not store raw card numbers, data is encrypted in transit and at rest, and transactions are monitored continuously. Contact us to discuss your security and compliance requirements
- Encryption and tokenization: sensitive data is tokenized so it never has to touch merchant servers.
Need documentation for a vendor review? Contact us and we will share what is available for your due diligence process.
Anti-money laundering, KYC and KYB
Everpay verifies the identity of the businesses and beneficial owners we onboard (know-your-customer and know-your-business), screens against sanctions and watchlists, monitors transactions for suspicious patterns and reports as required by law. Read the full AML policy.
| Control | What it covers |
|---|---|
| Customer due diligence | Identity, ownership and business verification at onboarding |
| Sanctions and watchlist screening | Screening of customers and relevant counterparties |
| Transaction monitoring | Ongoing review for unusual or suspicious activity |
| Suspicious activity reporting | Escalation and reporting to authorities where required |
| Record keeping | Retention of verification and transaction records |
Fraud and chargeback controls
Machine-learning risk scoring, device intelligence, velocity limits, 3D Secure 2 and chargeback tooling protect merchants and cardholders. See fraud prevention for details and our guide to payment fraud prevention best practices.
Data protection and privacy
We collect only the data needed to provide and secure our services. Individuals can ask to access, correct or delete their personal data, object to processing and request portability where the law provides those rights. Our privacy policy explains what we collect and why, and our cookie policy explains how to manage cookie preferences. Business customers who need a data processing agreement can request one through sales.
Who can use Everpay
We evaluate every merchant application on its merits, and certain activities are prohibited outright. Read the restricted and prohibited businesses policy before applying.
Regulatory disclosures
- Everpay Corporation is a financial technology company and is not a bank.
- Banking services are provided by partner banks as described in the disclosures in our site footer.
- Everpay Corporation is headquartered in Toronto, Canada.
- Our terms of service govern use of the platform.
Responsible disclosure
If you believe you have found a security vulnerability, please email hello@everpayinc.com with the details and steps to reproduce. Please give us reasonable time to investigate before any public disclosure, and do not access or modify other people's data. Our machine-readable contact details are published at /.well-known/security.txt.
Complaints and accessibility
If something has gone wrong, our complaints process explains how to tell us. We also publish an accessibility statement. Operational availability is published on our status page.
Policy index
| Policy | Link |
|---|---|
| Terms of service | /terms |
| Privacy policy | /privacy-policy |
| Cookie policy | /cookie-policy |
| AML policy | /aml-policy |
| Restricted and prohibited businesses | /restricted-businesses |
| Complaints procedure | /complaints |
| Accessibility statement | /accessibility |
| Security overview | /security |
Frequently asked questions
Doing vendor due diligence?
Talk to our team about security documentation, DPAs and compliance questionnaires.