Security built into the way we work.
InstiPays is designed with security in mind—from account access and permissions to the handling of payment and organizational information.
Security practices may evolve as the InstiPays platform grows.
Security first
Payment collection involves more than moving money.
Institutions and organizations use payment systems alongside customer, student, member, billing, and transaction information. Protecting that information is an important part of building a reliable platform.
InstiPays takes a layered approach to security, combining application controls, account protection, access management, infrastructure safeguards, and responsible operational practices.
A layered approach
No single security control protects an entire platform. InstiPays considers security across multiple layers of the service.
Security controls
Security across the platform.
InstiPays considers security at different points in the application and operational workflow.
Secure Authentication
Access to InstiPays accounts is protected through authentication controls designed to help prevent unauthorized access.
Role-Based Access
Institutions can provide users with appropriate access based on their responsibilities, helping limit unnecessary access to sensitive information.
Protected Data
Information handled by the platform is managed using technical and administrative safeguards appropriate to the service.
Access Awareness
Account activity and access should be managed carefully so institutions can maintain control over who can work with their information.
Application Protection
InstiPays is designed with security considerations throughout the application and its supporting infrastructure.
Infrastructure Controls
The platform relies on infrastructure and service providers with their own security controls and operational practices.
Payment information
Payment processing can involve specialized providers.
InstiPays is designed to help institutions manage payment collection and related records. Actual payment processing and movement of funds may involve connected third-party payment providers.
Depending on the payment method and provider, payment credentials or sensitive payment details may be handled directly by the relevant payment provider rather than being stored by InstiPays.
The exact information handled and retained depends on the payment flow, integrations, and services enabled for the institution.
Keep sensitive payment details protected
Where third-party payment providers are used, their security controls, requirements, and terms may also apply to the transaction.
Access should match responsibility.
Not every user needs access to every part of an institution's payment workflow.
Example
Access management
Give the right people the right access.
Role-based access can help institutions organize permissions according to staff responsibilities. Administrators should regularly review who has access to their InstiPays account and remove access when it is no longer required.
Shared responsibility
Security works best when everyone plays a part.
InstiPays works to protect the platform, but institutions, organizations, administrators, staff, and users also have an important role in protecting their accounts and information.
Use strong and unique account credentials.
Limit administrative access to authorized personnel.
Review user access when staff responsibilities change.
Keep account and organization information accurate.
Report suspected unauthorized access or security issues promptly.
Use supported and up-to-date browsers and devices when accessing the platform.
Security concerns
See something that doesn't look right?
If you discover a suspected security issue, unauthorized access, or other security concern involving InstiPays, please contact us with enough information for us to understand and investigate the issue.
Report a Security ConcernSecurity and availability notice
We continuously work to improve the security of InstiPays. However, no internet-based system can be guaranteed to be completely secure or continuously available. Security practices may change as the platform, infrastructure, integrations, and services evolve.
Build with confidence
Let's build a better payment collection workflow.
Have questions about how InstiPays handles accounts, payments, or information? Talk to us about your requirements.