S
SWAGPay

Your security, our top priority

We do everything we can to protect your data and ensure reliable, secure transactions.

✓ Cutting-edge technology✓ International standards

End-to-end encryption

Your sensitive data is protected by modern encryption mechanisms.

Strong authentication (2FA)

Strengthen access to your account with multiple factors.

24/7 monitoring

Detection and tracking of suspicious activity.

Strict access control

Least-privilege principle and controlled permissions.

PCI DSS compliance

Architecture designed to minimize exposure to card data.

Data protection

Data processing in compliance with applicable requirements.

Secure infrastructure

Backups, redundancy and monitoring.

Regular tests and audits

Regular technical checks to maintain a high level of security.

SWAGPay security

Your payments and your data,
protected at every step

SWAGPay relies on approved financial partners and security mechanisms designed to protect transactions, accounts and sensitive data.

PCI DSS standard

PCI DSS (Payment Card Industry Data Security Standard) is the most demanding security standard in the payments industry. Our approved banking partners are certified at Level 1, the highest there is.

At SWAGPay, we never store your customers' card data. This sensitive information is handled exclusively by our certified partners, in secure, continuously audited environments.

Approved partners

Financial institutions regulated by the ACPR

Annual audits

Verification by certified QSA auditors

Continuous monitoring

24/7 monitoring of flows and anomalies

Zero card storage

Card data never stored by us

TLS 1.3

Encryption of all communications

✓
PCI DSS Level 1

Highest industry certification

✓
AES-256

Encryption of data at rest

✓
AI anti-fraud

Real-time behavioral analysis

✓
Mandatory 2FA

Two-factor authentication for sensitive operations

✓

End-to-end encryption

All communications between your browser, our servers and our financial partners are encrypted with TLS 1.3, the most recent and secure version available.

Sensitive data stored in our systems is encrypted at rest with AES-256, a military-grade encryption algorithm. Even in case of unauthorized access to our servers, the data would be unreadable.

TLS 1.3 in transit

All client-server communications are encrypted with the latest version of the TLS protocol.

AES-256 at rest

Data persisted in our databases is encrypted at the file and column level.

Separately managed keys

Encryption keys are stored in a dedicated environment, separate from the encrypted data.

Automatic rotation

Encryption keys are renewed automatically on a strict schedule.

2FA verification

Code sent by SMS to +33 *** *** 789

4
8
2
·
·
·

Code valid for 5 minutes

Two-factor authentication (2FA)

2FA adds an extra layer of security to your account. Even if your password were compromised, an attacker could not access your account without the one-time code sent to your phone.

  • ✓
    Activation available by SMS or authenticator app (TOTP)
  • ✓
    2FA mandatory for sensitive operations and profile changes
  • ✓
    One-time ephemeral codes, valid for 5 minutes
  • ✓
    Immediate alerts on login from a new device
  • ✓
    Full login history available in settings

Regulatory compliance

SWAGPay operates in strict compliance with European and French financial regulations.

PSD2

European directive on payment services. Strong authentication mandatory for all transactions.

GDPR

Full compliance with the General Data Protection Regulation. You stay in control of your data.

AML/CFT

Anti-money laundering and counter-terrorism financing procedures, compliant with French obligations.

ACPR

Our financial partners are authorized and supervised by the French Prudential Supervision and Resolution Authority (ACPR).

PSD3 (in preparation)

Anticipating European regulatory changes to ensure continuous compliance.

PCI DSS 4.0

Update to the latest version of the standard, incorporating the most recent security requirements.