SECURITY
Security engineered for business resilience
Our multi-layered security architecture is designed to prevent threats, ensure payment integrity, and provide the stable foundation your business requires.
Security with clear visibility
Security should never be a black box. Your Mollie Dashboard provides clear insights and essential controls for managing operational security. We secure the core platform while giving you the visibility to configure security settings that best suit your business.
Proactive threat defense
We do not wait for attacks; we hunt for vulnerabilities. Our security teams monitor systems 24/7 to detect and respond to suspicious activity. In-house testers run penetration tests, simulating cyberattacks to find and fix weaknesses before they can be exploited.
Robust data protection
We treat your data as a critical asset. All data is fully encrypted and securely hosted, helping simplify GDPR compliance. As your Data Controller, we take direct responsibility for protecting customer data, giving you and your customers greater confidence.
You are in control
Security is a partnership. While we protect the platform end-to-end, you get features designed around your setup. From the Mollie Dashboard, you can manage operational security and align Mollie’s protections with your internal processes for a seamless, secure operation.
Independently certified
You do not have to take our word for it. Our security programme is validated through rigorous audits, regulatory oversight, and internal reviews. Continuous assessment by recognised authorities helps us maintain high standards, protect your business, and earn your trust.
See something suspicious?
If you notice something unusual or suspect a security issue, please tell us. To report suspected fraud, phishing, or unauthorised account access, review our Responsible Disclosure and share your findings with us via email. For all other questions, please contact our support team.
Certifications and licences
SOC 2 Type 2
Our security, availability, and confidentiality controls are independently assessed against the AICPA's Trust Services Criteria, providing assurance of their effectiveness.
PCI-DSS Level 1
We meet the highest level of security for processing card payments, a standard that we can prove with our Attestation of Compliance (AoC).
Licensed Institution
We are a fully licensed financial and e-money institution in both the EU and UK, regulated by the Dutch Central Bank (DNB) and the UK's Financial Conduct Authority (FCA).
ISAE 3402 Type 2
Our operational controls are audited annually by an external auditor, providing independent assurance of our integrity.
