basis▴
BALANCING THE BOOKS
basis▴
AES
SECURITY
Built like a vault.Audited like one.
Your balances sit at FDIC-insured partner banks, in your name. What Basis holds is permissions — encrypted, logged and audited. This page is the whole spec.
256
SECURITY EVENT LOG · APPEND-ONLYSEALING
14:01:20WIREFedwire out−$240,000.00a4f2…9c1e
14:02:21KEYKMS rotation · ring 4—rot…90d
14:03:22ACHGusto payroll−$96,480.000c91…44f7
14:04:23AUTHSSO grant · scoped—scim…ok
14:05:24YIELDT-bill coupon+$8,412.77e2d8…1b03
99.99%
UPTIME, TRAILING 12 MO
240MS
FREEZE → NETWORK DECLINE
0
CUSTOMER FUNDS INCIDENTS, EVER
< 24H
SOC 2 REPORT DELIVERY
CERTIFICATIONS — HOVER FOR THE DETAIL
SOC 2 · TYPE IIHOVER — DETAIL
▴ Audited by Prescott & Co.
▴ Continuous controls monitoring
▴ Report under NDA, same-day
PCI DSSHOVER — DETAIL
▴ Level 1 service provider
▴ Card data never touches Basis
▴ Tokenized at the network
GDPR / CCPAHOVER — DETAIL
▴ EU + CA data rights built in
▴ DPA countersigned in hours
▴ Data residency options
ISO 27001HOVER — DETAIL
▴ Certified ISMS
▴ Annual surveillance audits
▴ Scope: all production systems
THE ENCRYPTION SPEC
Boring on purpose.
Audited to stay that way.
No exotic cryptography, no exceptions to the policy. The spec below is enforced by config, verified by auditors, and alarmed in production.
AT RESTAES-256-GCM · PER-TENANT KEYS
IN TRANSITTLS 1.3 · HSTS · CERT PINNING
KEY CUSTODYCLOUD HSM · 90-DAY ROTATION
ACCESSSSO/SCIM · HARDWARE MFA · LEAST-PRIVILEGE
SECRETSVAULTED · NEVER IN CODE OR LOGS
UPTIME, DRAWN TO SCALE
TRAILING 12 MO · 26 MIN TOTAL DEGRADATIONAUGNOVFEBMAY
FEB 12 · 14 MINElevated API latency, us-east-1 — auto-failover, no data impact
APR 03 · 12 MINDelayed webhook delivery — replayed in order, zero loss
SUBPROCESSORS — THE WHOLE LIST
AWSus-east-1 · us-west-2INFRASTRUCTURE
Column N.A.Member FDICPARTNER BANK
Grasshopper BankMember FDICPARTNER BANK
MarqetaPCI L1CARD ISSUING
PlaidSOC 2 IICONNECTIONS
NEED THE PAPERWORK?
SOC 2 report, pen-test summary, DPA and security whitepaper — under NDA, delivered same-day.
Request the report ▴security@basis.fin · disclosure rewarded
ALL SYSTEMS OPERATIONAL
Treasury & spend intelligence for companies that take their numbers seriously.
THE CLOSE — ONE EMAIL, MONTHLY
▴
NEW YORK
09:42:07basis▴