Yes. We handle your data with the same seriousness as your bank.
Hosted in the EU — personal data stays in Europe.
GDPR-compliant with a data processing agreement for you as a customer.
Encryption: TLS 1.3 in transit, AES-256 at rest.
Bank: connection via a PSD2-licensed AISP with read-only account access — Payfriend never moves money without your bank’s own approval (SCA) when you pay bills.
Continuous security monitoring (including via Vanta) and public claims such as SOC 2 Type II, ISO 27001, and ISO 42001 — see the full page.
See also
Didn’t find an answer? Message us via in-app chat, or use Contact.