Encryption and Data Storage

Once on SagePay’s systems, all sensitive data is secured using the same internationally recognised 256-bit encryption standards used by, among others, the US Government. The encryption keys are held on state-of-the-art, tamper proof systems in the same family as those used to secure VeriSign's Global Root certificate, making them all but impossible to extract. The data Sage Pay hold is extremely secure and they are regularly audited by the banks and banking authorities to ensure it remains so.