Regulation & Compliance

Gr4vy reduces and simplifies your regulation and compliance burden, offering you security with unrivaled flexibility for all of your payments. Our unique cloud-based single-tenant architecture lets you have data residency in different regions, minimizing the risk of a single point of failure while allowing you to comply with local data regulations.

features

Security and compliance with unrivaled flexibility, for all of your payments.

Infrastructure-as-a-Service

Gr4vy is an Infrastructure-as-a-Service (IaaS) company built natively in the cloud. Our solution leverages the latest innovation in cloud computing so you can have your own independent infrastructure deployment of Gr4vy—giving you full control over resilience, redundancy, and performance.

PCI DSS Level 1 compliant and SOC2 Type 2 certified

Your customer’s data is kept secure with the highest level of PCI certification—applied to merchants that process over 6M card transactions annually. Our certification ensures you can securely store customers’ payment details in the Gr4vy Vault, simplifying the PCI certification and maintenance for you.

Gr4vy is also SOC2 Type 2 certified. SOC2 is a standard for service organizations developed by the American Institute of CPAs (AICPA).

Data protection acts

Build your customer payment database without collecting personal information. Gr4vy’s cloud-based architecture brings computation and storage closer to the data source. Gr4vy supports GDPR, CCPA, Australian Privacy Law Standards and other local data regulations by acting as the data processor while ensuring that you are in control of your data.

Single-tenant and cloud based

Gr4vy deploys individual cloud instances for a more predictable performance and reliable infrastructure. You’ll have at least one instance of Gr4vy in the cloud, which means there’s no shared infrastructure or server resources with any other Gr4vy customers.

Data residency

Keep your transactions and data secure within a local, unique Edge that is compliant with sales and privacy regulations. Localized instances also solve latency issues when passing transaction data across large distances.