Welcome to the SequenceShift Trust Centre. This portal provides our customers, partners, and visitors with a transparent, high-level overview of our security posture, compliance certifications, and data protection practices.

Who We Are and What We Do

SequenceShift provides a secure Software as a Service (SaaS) Platform that captures cardholder information and submits it to payment providers for processing. We serve organisations requiring secure payment capture for Amazon Connect.

To ensure maximum security, SequenceShift does not store cardholder data after a financial transaction is completed; we only store the transaction's outcome.

Our Cloud Infrastructure

The SequenceShift platform is hosted entirely within Amazon Web Services (AWS) cloud infrastructure across multiple AWS Regions, allowing information processing to occur in the specific region selected by the customer. SequenceShift does not operate any physical data centres.

Our Trust and Compliance Posture

We maintain a robust security program backed by senior management commitment, financial investment, and rigorous external validation. Our core trust posture is anchored by the following key pillars:

• Industry-Standard Certifications: SequenceShift is fully certified and compliant with ISO/IEC 27001:2022 and PCI DSS v4.0.1. Our ISO 27001 Information Security Management System (ISMS) covers our SaaS platform, web application, software development processes, and cloud infrastructure management.
• Data Privacy and Protection: Safeguarding customer privacy is central to our operations. We limit personal data to what is necessary, encrypt it at rest, and archive or remove it when no longer needed. Payment transactions are protected using Transport Layer Security (TLS) version 1.2 and higher with real-time encryption.
• Operational Security & Threat Management: We employ strict system segregation using AWS Security Groups and firewalls. To proactively manage risk, we run quarterly internal and external network vulnerability scans (using a PCI SSC-approved scanning vendor for external scans) and continuously monitor security alerts.
• Personnel Security: All personnel with administrative or systems access to our production environment must be formally approved. Additionally, all personnel with physical access to equipment that transmits sensitive information must undergo police criminal history checks.

This Trust Centre serves as a comprehensive resource to help you understand the policies, controls, and practices we use to keep your data secure.