02 Security
Your money, guarded like it's ours.
A payments rail is only as good as the trust behind it. Here's how Canopay protects your balance, your identity and your history.
Balances held, not lent
Customer funds sit in segregated accounts at a Canadian bank, apart from Canopay's own money. We never lend them out.
Every movement signed
Each transfer is signed, timestamped and appended to a ledger you can export at any time.
Device-level approval
New devices, new payees and offramps all require a second factor before a cent moves.
Encrypted in transit and at rest
Traffic is encrypted in transit, and personal and financial data is encrypted at rest.
Least access, always logged
Staff access to customer data is limited to the people whose role needs it, and every access is recorded.
Hosted in Canada
Data stays in Canadian regions, on infrastructure we run, under Canadian law.
Found a vulnerability?
Tell us before anyone else. Email support@canopay.com with the details and steps to reproduce. We'll acknowledge your report within two business days and keep you posted while we fix it.
Please don't access other people's accounts or data, and give us reasonable time to fix the issue before disclosing it.