Skip to content
Security & Compliance

The page your compliance team will read first.

UK-registered, UK-hosted, GDPR by default, PCI partnership with FDF, BoldSign chain-of-custody, encrypted credentials at rest, field-level audit trail across every module. Send the link, save the meeting.

valtura.app / security
UK Co. No.16319763
UK-hostedEU data perimeter
GDPRExport & erasure
PCI · FDFProgramme partner
BoldSignChain of custody
UK-hostedPlymouth · EU
Identity

UK Co. No. 16319763

Valtura Payments Group Limited. Plymouth, Devon. Registered in England & Wales.

Hosting

UK-hosted, EU data perimeter

Production database and backups in EU/UK region. No data transfers to non-adequate jurisdictions.

Data

GDPR by default

One-click data export per contact. One-click erasure. Audit trail retained per policy.

Compliance perimeter

Everything a buyer's compliance officer asks for.

These are the questions that come up in the second meeting. Get them out of the way in the first.

PCI DSS partnership

Partnered with FDF for PCI DSS programme delivery. Referrals tracked in the PCI Revenue module.

Encrypted credentials

Acquirer credentials and integration tokens encrypted at rest. Per-ISO scope. Never logged.

BoldSign chain-of-custody

E-sign provider with audit trail and certificate generation. Signed PDFs include hash and timestamp.

Audit trail

Field-level audit log on every record. Who, what, when, from where. Forwardable to legal.

GDPR export & erasure

Built into the CRM module. One-click per contact. Includes attachments, activity log, and audit history.

KYC built into onboarding

ISO onboarding flow includes UBO collection, document upload, and admin review with full status tracking.

Operational

How the platform runs day-to-day.

UK-hosted

Production database in EU/UK region. Backups encrypted. No data transfer to non-adequate jurisdictions.

Roles + permissions

Admin / Manager / Agent role split. Per-feature grants for granular access. Tier-gated modules.

Real-time admin notifications

Postgres LISTEN/NOTIFY → SSE stream to the admin dashboard. Operational events visible immediately.

Want a copy for your compliance officer?

Talk to our team and we'll send a security pack: data flow diagram, encryption summary, retention policy, and the platform terms.