Shielded From the Adversaries
We understand that trust is paramount in the financial industry, so we've implemented sophisticated security practices to help safeguard your data and give you peace of mind. Dwolla maintains a SOC 2 type 2 report focused on the Security trust principle and our Information Security (InfoSec) team is dedicated to protecting our data from potential adversaries using a defensive strategy against prospective threats. We believe security work is never done, so we are always striving to improve our practices.
Our commitment to security is built on a multi-layered approach that encompasses our technology, our people and our culture.
1
Ongoing Education
All Dwolla employees are required to complete annual Information Security and Privacy training, and our Engineering and InfoSec teams also receive advanced Information Security training.
2
Community Conscious
Dwolla uses tokenization to decrease the value of financial transaction messages, as sensitive information is replaced with a token and unique identifiers.
3
Endpoint Security
Dwolla secures all devices with access to its resources by monitoring them with known-good configurations and multiple security agents.
4
Continuous Monitoring
Dwolla's platform is monitored 24/7/365 using a combination of internal and external tools and services. This includes monitoring Dwolla Platform API endpoints, infrastructure, service and event monitoring.
5
Border Protection
Dwolla uses a combination of AWS virtual private clouds (VPCs) and an Enterprise partnership with Cloudflare to provide a secure and highly available platform edge.
6
Vulnerability Management
Dwolla performs penetration tests on a bi-annual basis and maintains relationships with multiple external providers of security assessment services.
For a deeper dive into our comprehensive security measures, please visit our dedicated security website.
“At Dwolla, we are continuously testing because we should know adversarial techniques. Our Information Security Program focuses on the latest technologies and understanding how they are being exploited.”
Skyler NesheimDwolla’s Chief Technology Officer and Chief Information Security Officer
