Security & Compliance
Security that lets you forget about security.
Card data never touches your systems. HL Hunt tokenizes at the edge, encrypts everything, and carries the certifications so you can stay at the minimum PCI scope and focus on your business.
Certifications and registrations
- PCI DSS
- Level 1 Service Provider, audited annually
- SOC 2
- Type II
- FinCEN
- Registered Money Services Business
- NMLS
- ID 2759282
- PCI CPoC
- Certified Tap to Pay on commodity devices
- Privacy
- GDPR and CCPA compliant
Technical controls
- Tokenization of all card and bank credentials with network tokens where available
- TLS 1.3 in transit, AES-256 at rest, HSM-backed key management
- 3-D Secure 2.0 with adaptive step-up and liability shift
- Real-time fraud scoring on 500+ signals
- Role-based access, SSO, hardware-key MFA, and full audit logs
- Signed webhooks and idempotent APIs
- Multi-region redundancy with automatic acquirer failover, 99.99% uptime
Responsible disclosure
We welcome security research. Report vulnerabilities to info@hlhunt.org with "Security" in the subject. We acknowledge within 24 hours and do not pursue legal action against good-faith researchers.
Start accepting payments today.
Create your account in minutes. Underwriting is done up front, so you are approved before your first charge.