Security & Card Data
Independent processing. 3-D Secure on every transaction. Card numbers never touch our servers.
Express
PCI-DSS compliant processing
All payments are captured by PowerTranz, a PCI-DSS Level 1 certified payment processor. Card details are entered on PowerTranz's hosted, TLS-encrypted page and never pass through, or are stored on, our servers.
3-D Secure (Verified by Visa / Mastercard ID Check)
Every transaction is submitted with 3-D Secure 2.x authentication when supported by your issuing bank, providing an additional cardholder verification layer and shifting fraud liability to the issuer.
Transport encryption
Our entire site is served over HTTPS using TLS 1.2+ with HSTS enabled. Authentication tokens are stored in secure, HTTP-only browser storage.
Data minimisation
We retain only the last four digits of your card, expiry month, and an anonymised processor token — enough to display your saved payment method and process your recurring subscription, never enough to make a card-not-present purchase elsewhere.
Reporting a vulnerability
If you believe you have found a security issue, email security@beyondmotivationacademy.com. We respond within one business day.