How we handle compliance
A plain-English overview of how the gateway operates. This page is not an independent audit. Fulfillment, diverse-spend tracking, and regulated reporting are handled by our vetted partners under their own audited entities.
Encrypted in transit
Intake submissions travel over TLS to the partner, tagged with a tracking ID. We don't store the payload after dispatch.
Standard MSA
Work happens under a standard master service agreement. The partner signs the statement of work. We contract only for routing and verification.
Built to be defensible
Engagements are designed to hold up under IRS §6001, HIPAA 45 CFR §164, SEC 17a-4, and 2 CFR 200. Confirm the specifics with your counsel.
Held by partners
SOC 2 Type II and ISO 27001 attestations sit with the partners who need them. Letters are available on request under NDA.
We own the intake and the routing. The partner owns fulfillment, certifications, and regulated reporting. You own the accuracy of what you submit.