Trust and security
Every claim on this page links to how it is done
Trust in cross-border payments is earned by being checkable. Below is what Uniffy does to protect your identity, your money and your data, written so you can hold us to it.
Identity
Every customer verifies their identity before they can pay, and every beneficiary is verified before it can be paid. Verification is renewed when risk changes. Institutions and businesses verify their entity and beneficial owners.
How verification works →Safeguarding of customer money
Where a regulated entity in the Faircores group holds customer money, it is held separately from the entity's own funds under the safeguarding rules of that entity's regulator. The entity that serves you, and the regime that applies, are listed by country.
Legal entities and permissions →Risk monitoring
Payments are screened against sanctions and politically exposed person lists and monitored for unusual patterns. When a mandatory check is unavailable, the payment waits rather than proceeding.
Privacy
We collect the minimum data each purpose needs, keep it for defined periods, and honour access, correction and deletion requests. Marketing analytics never receive your personal data.
Privacy notice →Data residency
Customer records are stored in the region of the entity that serves you, and cross-border transfers happen only with a lawful basis. Our infrastructure is designed so one region does not depend on another to authorise a payment.
Encryption and keys
Data is encrypted in transit and at rest. Payment signing and key management use hardware-backed key storage with dual control. Card security codes are never stored.
Operational resilience
Critical services run across multiple availability zones with tested recovery. Unknown outcomes from a bank or provider are shown as processing, never assumed failed, so you are never charged twice.
Service status →Support and complaints
Support can see the same payment record you do. Complaints follow a documented procedure with timelines, and where an external dispute-resolution body applies in your country, we tell you how to reach it.
Complaints procedure →
Report a security concern
If you believe you have found a vulnerability, contact security@uniffypay.com. We acknowledge reports within two business days and do not pursue researchers who act in good faith.
Responsible disclosure policy →What we will never ask for
- Your password or one-time code, by phone, email or chat.
- Payment to “release” a transfer.
- Remote access to your device.
If someone claiming to be Uniffy does, stop and contact support through the app.
Content owner: Security and Privacy owners; General Counsel for regulated statements. Approved 2026-09-19. Next review 2026-12-19. Claims on this page are versioned and reviewed before publication.
Questions about how your payment is protected?
Our support team can walk you through any part of this page.