Certifications
Independently audited, continuously maintained
-
PCI DSS Level 1
The highest tier of Payment Card Industry compliance — required for processing card payments at scale
-
SOC 2 Type II
Independent audit of security, availability, and confidentiality controls — renewed annually
-
ISO 27001
International standard for information security management systems — covering data, people, and processes
-
GDPR compliant
Data residency, privacy by design, and right-to-erasure processes built into the platform
-
WCAG 2.1 AA
Rider-facing apps and interfaces meet Web Content Accessibility Guidelines at AA level
-
Cloud security
Multi-zone redundancy, encryption at rest and in transit, and continuous penetration testing
What SaaS security means for agencies
Security maintained by Masabi, not by your IT team
-
Continuous compliance
Certifications are maintained continuously — not a one-off effort that agencies have to fund separately.
-
Vulnerability management
Continuous penetration testing and patch deployment — security updates are part of the SaaS subscription.
-
Data handling
Rider data stored, processed, and deleted in line with GDPR and applicable regional regulations.
-
Audit support
Full documentation and audit support available for agency compliance reviews and procurement due diligence.