Smarter Global Payments


Payment services for CurrencyWave are provided by Currencycloud, a trusted global payments platform.  Here is some important  information about their security:

Technical Security

Currencycloud takes the security of your data and money very seriously. They are ISO/IEC 27001:2013 compliant and consistently review and enhance their processes and systems to ensure that they remain secure.

Physical security

The service operates on Amazon Web Services (AWS) which is certified under a number of global compliance programmes which underlines best practices in terms of data centre security.

  • ISO 27001 Information Security Management Controls
  • ISO 27018 Personal Data Protection
  • PCI-DSS Level 1 Payment Card Standards
  • SSAE16/SOC 1, SOC2 and SOC 3
  • FIPS United States Government Security Standards

For the full list of AWS compliance programs see:

More information about AWS data centre controls may be found here:

Network security

There are dedicated systems in place to protect against Distributed Denial of Service (DDoS) attacks as well as man-in-the-middle attacks. We use reputable registrars to protect against domain hijacking and “phishing” attacks.

The platform undergoes regular penetration testing and has protection in place against common vulnerabilities like code injection attacks and cross-site scripting attacks.


All network traffic is encrypted at a transport level and confidential information is encrypted at rest. We use best practices in terms of encryption key storage and security.

Information security

The platform and operational security is certified under ISO/IEC 27001:2013, the international best practice standard for Information Security Management Controls which is independently audited.

We also comply with best practices and regulations pertaining to the management of personal data under the UK Data Protection Act (DPA), as well as the upcoming European Union General Data Protection Regulation (GDPR).

Strong access control

The platform provides a role based, hierarchical security model with two-step authentication and multi-factor authentication for sensitive systems. All access is logged and audited for suspicious behaviour.

Use  Currencycloud  with confidence

Your money and your data is as important to us as it is to you. Here are some of the things we do to make sure that you can use our services with peace of mind.

Authorised by the FCA

Currencycloud is authorised by the Financial Conduct Authority  for issuing of electronic money and the provision of payment services with FCA registration number 900199.

Currencycloud is registered with FinCEN and is authorized in 22 states to transmit money.

Trusted by more than a million people

Currencycloud process over $1bn a month on behalf of hundreds of thousands of people and companies.


We comply with best practices and regulations pertaining to the management of personal data under the UK Data Protection Act (DPA), as well as the upcoming European Union General Data Protection Regulation (GDPR).

Find out more

Secure Platform

We are ISO/IEC 27001:2013 compliant and have robust processes to protect our systems.

Funded by high quality investors

Currencycloud is backed by some of the leading names in the investment community, including GV (Google Ventures), Sapphire Ventures, Anthemis, Notion Capital.

Safeguarded bank accounts

Your money is held in separate accounts with tier one banks. In the unlikely event of Currencycloud ceasing to exist, your money remains protected.

Contact Us

T. Enquiries: +44 (0) 113 451 0180  E.


CurrencyWave Ltd
1200 Century Way, Thorpe Park,   Leeds, LS15 8ZA, United Kingdom

Payment Provider

The Currency Cloud
The Steward Building, 12 Steward Street, London, E1 6FQ, United Kingdom

Payment Provider

Equals Connect Limited
Vintners’ Place, 68 Upper Thames St, London, EC4V 3BJ, United Kingdom

[contact-form-7 404 "Not Found"]

Please complete the following for access to the free download.

Don’t worry, we will only contact you with regards to your enquiry and your details will be deleted forever after an appropriate period of time. We will never pass on your information to anyone else.

Yes, I am happy for you to hold my data and send further correspondence.No, please do not send me any future correspondence.
I agree to Terms and Conditions and Privacy and Cookies policy.