Company · Security
Security built into every layer.
PCI DSS certified, encrypted, and continuously monitored. Secure and resilient infrastructure built into every layer.
Industry-leading security certifications.
PCI DSS
Certified compliant. All card data handled to the highest payment industry security standard.
PSD2 Strong Customer Authentication
3D Secure for all card transactions. Two-factor authentication for platform access.
GDPR compliant
Data processed in accordance with UK and EU data protection regulations.
Authentication & Access Control
Multi-layered access security.
- Two-factor authentication (2FA) for all platform users.
- Biometric login (fingerprint, Face ID) on the B4B Payments mobile app.
- Role-based access control - configure user permissions by role, entity, and transaction value.
- Fixed IP and VPN access options for the web app.
- Session management - automatic timeout, concurrent session controls.
Encryption & Data Protection
Data encrypted at every level.
- Data encrypted at rest and in transit using industry-standard TLS 1.2+.
- Card data tokenised - full card numbers are never stored in the B4B Payments platform.
- Secure API communication via OAuth 2.0 with signed webhook payloads.
Fraud Prevention & Monitoring
Continuous monitoring and threat detection.
- Real-time transaction monitoring - automated detection of suspicious activity.
- Sanctions screening - all transactions screened against global sanctions lists.
- AML/KYC - automated onboarding checks and independently audited compliance processes.
- Card-level controls including card blocking and merchant restrictions, managed through B4B Payments.
Customer fund protection
How customer funds are safeguarded.
- Customer funds are not protected by the Financial Services Compensation Scheme (FSCS).
- UK funds are safeguarded under the Electronic Money Regulations 2011, held in segregated accounts with authorised credit institutions.
- EU funds are safeguarded under the Law on Electronic Money and Electronic Money Institutions (Lithuania).
- Segregation means customer funds are ring-fenced from B4B Payments' own funds and protected in the event of insolvency.
Key takeaway
Safeguarded funds are held in ring-fenced accounts with regulated financial institutions, separate from B4B Payments' own funds, in accordance with Electronic Money Regulations and relevant regional regulatory requirements.
Next step
Questions about our security posture?
Contact our compliance team for detailed security documentation, penetration testing reports, or to discuss specific requirements.