Security and Trust

DirecFunds applies layered technical and operational controls to its payment-workflow software. Public descriptions are intentionally limited so that sensitive architecture and control details are not exposed.

Security principles

• Role-based access and authenticated application experiences.
• Encryption in transit and protected secret management.
• Managed workload identities and least-privilege service access.
• Structured audit events with controlled retention.
• Reliability monitoring, health checks, and operational runbooks.
• Documented change, release, and incident-response processes.

Clear responsibilities

DirecFunds provides the software workflow and orchestration layer. Approved bank and payment providers execute the underlying payment rails. Customers are responsible for their approved users, internal policies, and banking relationships.

Evidence-based claims

Certifications, audit reports, PCI scope, insurance details, service commitments, and compliance statements are published only when the responsible owner has supplied current written evidence and approved the wording.

For security questionnaires or due-diligence requests, contact DirecFunds.