Security at felloh
How we protect card data, payment data and the personal data of your customers.
How we protect payment data.
PCI DSS compliant
felloh is PCI DSS compliant as a service provider, validated with a Self-Assessment Questionnaire D (SAQ D).
Card data is tokenised
Card details are tokenised by Basis Theory, a PCI DSS Level 1 service provider, so felloh never stores full card numbers.
Hosted in the UK
Our platform runs on Amazon Web Services in London, UK. Data is encrypted in transit.
External vulnerability scanning
Our internet-facing systems are scanned by Sectigo, a PCI Approved Scanning Vendor (ASV).
Data protection.
Felloh Ltd is registered with the UK Information Commissioner’s Office (ICO) under registration number ZA776481.
Our privacy policy explains how we handle personal data and includes our current list of sub-processors.
Documentation for customers.
Our Information Security Policy, PCI Attestation of Compliance and Data Processing Agreement (DPA) are available to customers on request. Email hello@felloh.com.
See how this works around your bookings.
Bring one payment, reporting or cash-position problem. We will show how felloh connects the booking-level money trail behind it.
Book a walkthrough