We are PCI DSS compliant level 1

The highest and most stringent of the PCI DSS levels. Our customers can trust that their transactions are secure and that their information is always protected, reducing fraud and minimizing risks that can put your operations and reputation at risk.

Learn more about PCI DSS 3.2.1.

Your security and trust are our top concerns

At DEUNA, we hold your security and trust above all. We continuously work to protect your information and ensure a secure experience every time you interact with us.

Data protection

We safeguard your transactions with advanced security measures.

Infrastructure

DEUNA is built on top of latest security standards and best practices.

Risk Management

We keep an eye on risks to make your transactions safe.

DATA PROTECTION

Your Privacy, Our Priority

Encryption

We use TLS 1.3 to ensure secure transmission and the AES 256 algorithm to encrypt data on the server, thereby complying with the latest industry regulations.

Card Data

Our checkout solution is protected by a vault compliant with ISO 27001, GDPR, HIPAA, and PCI DSS certifications.

Identity and Access

We rely on AWS IAM and Okta to set detailed permissions and enforce MFA, ensuring only authorized personnel have access to private resources.

Security at the forefront of everything we do

INFRASTRUCTURE: ROBUST AND RELIABLE 

Network Security

We isolate resources and networks, complemented by traffic monitoring, to detect and respond to threats, thus protecting you from hackers.

High Performance

The AWS Well-Architected Framework is part of our core to ensure optimized security, reliability, and efficiency, guaranteeing you the best performance.

Periodic Evaluations

We frequently perform penetration tests and vulnerability assessments to ensure the integrity of the payment environment.

RISK MANAGEMENT

We put ourselves before threats

Risk assessments
and management

At DEUNA, we prioritize security by constantly evaluating, identifying risks, and adjusting our mitigation measures.

Business Continuity
and Disaster Recovery

We base our strategies on ISO 22301 and ISO 27001 standards.

Incident Simulation

We conduct drills to test and improve the effectiveness of our security policies, identifying and correcting vulnerabilities before they can be exploited.

Secure Development

Our products are developed  under international standards such as the OWASP top 10 2023 and OWASP Top 10 API security risks 2023.