Security
At Gray Partners, security is the foundation of our business. Our partners trust us with their financial infrastructure, and we ensure that trust is protected through enterprise-grade security protocols and strict access policies.
1. The "Zero Password" Principle
We operate on a strict Zero Password policy. At no point during onboarding or operation will Gray Partners ever ask for your Stripe root administrator password.
All integrations are handled via Stripe's official Team Member Roles or via secure OAuth.
We only request the specific permissions needed to manage transactions, process refunds, and monitor volume.
You retain ultimate ownership and the ability to revoke our access at any time with a single click.
2. Data Encryption In Transit and At Rest
We treat your personal data and integration keys with the highest level of security:
- In Transit: All communication between your browser and our platform is encrypted via standard HTTPS/TLS (Transport Layer Security).
- At Rest: Sensitive partnership data is stored in secure server environments utilizing advanced encryption standard (AES).
3. Internal Access Controls
Not everyone at Gray Partners has access to partner environments. We employ the Principle of Least Privilege.
Only dedicated account managers and senior technical staff have access to integration specifics.
Internal access is gated behind mandatory Multi-Factor Authentication (MFA) and strict IP-whitelisting.
All internal actions involving partner accounts are logged and audited regularly.
4. Platform Infrastructure
Our platform is hosted on modern, robust cloud infrastructure that complies with major industry security standards, including SOC 2 and ISO 27001. We employ Web Application Firewalls (WAF) to protect against DDoS attacks, SQL injection, and other common vulnerabilities.
5. Reporting a Security Vulnerability
If you are a security researcher or a partner and believe you have found a vulnerability on our platform, please report it immediately.
Contact our security team securely at support@graypartners.co. We investigate all legitimate reports and will respond promptly.