---
title: Security Center | Data Protection & Security | SideUp
description: "How SideUp protects your data and your money: US privacy laws, secure card payments with Stripe and Celtic Bank, platform security and how to report a concern."
---
[Skip to main content](https://hi.sideup.com/trust#main-content)
[](https://hi.sideup.com/?hsLang=en)
- Solutions
Pre-tax Benefits
IRS-compliant, pre-tax benefits for core needs.
- [Student Loan & Tuition Smarter education funding](https://hi.sideup.com/student-loan-repayment-benefits?hsLang=en)
- [Commuter Pre-tax transit & parking](https://hi.sideup.com/commuting?hsLang=en)
- [HRA Health Reimbursement Arrangement](https://hi.sideup.com/hra?hsLang=en)
- [Family Care Real support for caregivers](https://hi.sideup.com/family-care?hsLang=en)
Lifestyle Spending Accounts
Flexible, post-tax benefits for modern life.
- [Wellness & Fitness Gym, mental health & wellbeing](https://hi.sideup.com/wellness-fitness?hsLang=en)
- [Work From Home Home office & remote setup](https://hi.sideup.com/work-from-home?hsLang=en)
- [Food Meals, groceries & nutrition](https://hi.sideup.com/food?hsLang=en)
- [Utilities & Essential Bills Internet, phone & household bills](https://hi.sideup.com/utilities-essentials-bills?hsLang=en)
- Platform
For Employers
- [Manage Benefits Streamline your benefits administration](https://hi.sideup.com/how-to-manage-benefits?hsLang=en)
- [Integrations Connect with your favourite tools](https://hi.sideup.com/integrations?hsLang=en)
- [Trust Security, Privacy and Compliance](https://hi.sideup.com/trust)
For Employees
- [How to spend benefits Discover how to use your SideUp card](https://hi.sideup.com/how-to-spend-your-benefits?hsLang=en)
- [Stayconomics](https://hi.sideup.com/stayconomics?hsLang=en)
Learn with Stayconomics
Explore the ideas, research, and strategies behind workplaces people choose to stay in.
[Blog Data-backed, no-fluff articles on retention, benefits, and the future of work.](https://hi.sideup.com/stayconomics?hsLang=en) [Podcast On Youtube and Spotify with the leaders who are actually figuring it out.](https://hi.sideup.com/stayconomics/podcast?hsLang=en) [Newsletter The best of what's happening in HR and employee retention, curated, concise, and worth your Monday morning.](https://hi.sideup.com/stayconomics/tag/newsletter?hsLang=en) [Events & Webinars Real experts, real questions, real takeaways you can use before the week is over.](https://hi.sideup.com/stayconomics/events-webinars?hsLang=en) [Explore by Topics Retention, benefits, HR tech, financial wellness, and more, organized by what you need.](https://hi.sideup.com/stayconomics/topics-1?hsLang=en)
- Company
Know more about us
Who we are, who we work with and how to reach us.
[Partnership Grow with us, as a partner, reseller or local business](https://hi.sideup.com/partnership?hsLang=en) About us The story and the people behind SideUp Brandbook Our logo, colours and voice, ready to use [Contact us Questions, ideas or a demo? Say hello](https://hi.sideup.com/contact-us?hsLang=en)
- Log in
- [Employee](https://app.sideup.com)
- [Business Platform](https://admin.sideup.com)
[Book a demo](https://meetings-eu1.hubspot.com/lana-leles/demo)
- Solutions
- Pre-tax Benefits
- [Student Loan & Tuition](https://hi.sideup.com/student-loan-repayment-benefits?hsLang=en)
- [Commuter](https://hi.sideup.com/commuting?hsLang=en)
- [HRA](https://hi.sideup.com/hra?hsLang=en)
- [Family Care](https://hi.sideup.com/family-care?hsLang=en)
- Lifestyle Spending Accounts
- [Wellness & Fitness](https://hi.sideup.com/wellness-fitness?hsLang=en)
- [Work From Home](https://hi.sideup.com/work-from-home?hsLang=en)
- [Food](https://hi.sideup.com/food?hsLang=en)
- [Utilities & Essential Bills](https://hi.sideup.com/utilities-essentials-bills?hsLang=en)
- Platform
- For Employers
- [Manage Benefits](https://hi.sideup.com/how-to-manage-benefits?hsLang=en)
- [Integrations](https://hi.sideup.com/integrations?hsLang=en)
- [Trust](https://hi.sideup.com/trust)
- For Employees
- [How to spend benefits](https://hi.sideup.com/how-to-spend-your-benefits?hsLang=en)
- [Stayconomics](https://hi.sideup.com/stayconomics?hsLang=en)
- Learn with Stayconomics
- [Blog](https://hi.sideup.com/stayconomics?hsLang=en)
- [Podcast](https://hi.sideup.com/stayconomics/podcast?hsLang=en)
- [Newsletter](https://hi.sideup.com/stayconomics/tag/newsletter?hsLang=en)
- [Events & Webinars](https://hi.sideup.com/stayconomics/events-webinars?hsLang=en)
- [Explore by Topics](https://hi.sideup.com/stayconomics/topics-1?hsLang=en)
- Company
- Know more about us
- [Partnership](https://hi.sideup.com/partnership?hsLang=en)
- About us
- Brandbook
- [Contact us](https://hi.sideup.com/contact-us?hsLang=en)
- Log in
- [Employee](https://app.sideup.com)
- [Business Platform](https://admin.sideup.com)
- [Book a demo](https://meetings-eu1.hubspot.com/lana-leles/demo)
Hero video: upload hero-trust.mp4
Security Center
# Your data and your money, protected
SideUp looks after information about your people and the money they spend on their benefits. Here's how we protect both, in plain English.
[Data protection](https://hi.sideup.com/trust#data-protection)[Secure payments](https://hi.sideup.com/trust#payments)[Platform security](https://hi.sideup.com/trust#security)[Report a concern](https://hi.sideup.com/trust#report)
## [US privacy laws Data protection We handle personal data in line with applicable US privacy laws, including the California Consumer Privacy Act (CCPA), and only collect what we need to run your benefits. How we protect data →](https://hi.sideup.com/trust#data-protection)
## [Issued by Celtic Bank Secure payments SideUp cards are powered by Stripe and issued by Celtic Bank, with funds held at Stripe's bank partners, Members FDIC. How payments work →](https://hi.sideup.com/trust#payments)
## [Built in Platform security Access controls, encryption and careful handling of card details keep your company's account and your team's information safe. How we secure SideUp →](https://hi.sideup.com/trust#security)
Data protection
## Built around US privacy laws
We process personal data in line with applicable US privacy laws, including the California Consumer Privacy Act (CCPA). That means being clear about what we use, why we use it and how long we keep it.
Only what we need
We collect the information needed to run your benefits, pay providers and keep the right records, and nothing more.
Used for a clear purpose
Data is used to deliver the SideUp service, support your team and meet our legal obligations. We never sell personal data.
Kept only as long as needed
We keep personal data for as long as we need it for these purposes or the law requires, then delete or anonymize it.
YOUR RIGHTS
### You're in control of your data
AccessCorrectionDeletionPortabilityOpt-out of sale or sharingNo discrimination
To exercise any of these rights, email our Privacy & Data Protection Lead. Depending on where you live, you may also be able to contact your state attorney general or privacy regulator.
[privacy@sideup.com](mailto:privacy@sideup.com)
Secure payments
## Secure card payments you can rely on
Every SideUp card is powered by Stripe and issued by Celtic Bank, so your benefit budgets are handled through established US banking and payments partners.
✓
Cards powered by Stripe and issued by Celtic Bank
✓
Funds held at Stripe's bank partners, Members FDIC
✓
Spending limited to the budgets and categories your company sets
Protected
Issued by Celtic Bank
SideUp Visa® Commercial cards are powered by Stripe and issued by Celtic Bank. Stripe Issuing balances are provided in the US by Stripe Payments Company, licensed money transmitter, with funds held at Stripe's bank partners, Members FDIC.
Platform security
## Security built into everyday use
Good security isn't one big feature. It's lots of small, sensible protections working together.
01
### Encrypted connections
Data traveling between your browser, our app and our systems is encrypted.
02
### The right access for the right people
Admins only see what they need, and employees only see their own budgets and spending.
03
### Card details stay with our issuer
Full card numbers are handled by our card issuing partners, rather than stored on SideUp's own systems.
04
### Trusted vendors
We work with established providers and expect them to protect data to the same standard we do.
Security controls
## The controls behind the promise
A full view of the safeguards we have in place, grouped by where they protect you.
5 areas54 controls✓ In place
### Infrastructure security
14 controls
✓Unique production database authentication
✓Encryption key access restricted
✓Unique account authentication enforced
✓Production application access restricted
✓Production operating system access restricted
✓Production network access restricted
✓Intrusion detection in use
✓Log management in use
✓Infrastructure performance monitored
✓Network segmentation in place
✓Network firewalls in use
✓Network firewalls regularly reviewed
✓Network and system hardening standards
✓Service infrastructure maintained
### Internal security procedures
14 controls
✓Business continuity and disaster recovery plans
✓Configuration management system
✓Change management procedures enforced
✓Production deployment access restricted
✓Defined development lifecycle
✓Customer support channels available
✓Security commitments shared with customers
✓Incident response plan in place
✓Risk management program
✓Regular risk assessments
✓Vendor management program
✓Cybersecurity insurance maintained
✓Security policies set and reviewed
✓Clear security roles and responsibilities
### Organizational security
12 controls
✓Asset disposal procedures
✓Production inventory maintained
✓Portable media encrypted
✓Anti-malware technology in use
✓Acceptable use policy acknowledged
✓Security awareness training
✓Confidentiality agreements for employees
✓Confidentiality agreements for contractors
✓Regular performance reviews
✓Code of conduct acknowledged and enforced
✓Background checks
✓Password policy enforced
### Product security
7 controls
✓Data encryption in use
✓Control self-assessments
✓Vulnerabilities scanned and fixed
✓Role-based access for admins and employees
✓Card details held by our card issuing partners
✓Secure sign-in to the app
✓Logging of key admin actions
### Data & privacy
7 controls
✓Data retention procedures
✓Customer data deleted when they leave
✓Data classification policy
✓Published privacy policy
✓Named Privacy & Data Protection Lead
✓Process for privacy requests
✓Personal data never sold
We review our controls regularly and are working toward formal security certification.
Report a concern
## Something doesn't look right?
Tell us straight away. The sooner we know, the sooner we can help.
Card or account
### Lost card or a payment you don't recognise
Contact our Customer Success team and we'll help you secure your card and look into the payment.
[help@sideup.com](mailto:help@sideup.com)
Personal data
### A question or concern about your data
Contact our Privacy & Data Protection Lead about how your data is used, or to exercise your rights.
[privacy@sideup.com](mailto:privacy@sideup.com)
Security
### A possible security issue
Found something that could affect the security of SideUp? Let us know, with as much detail as you can, and we'll investigate.
[Report an issue](mailto:privacy@sideup.com?subject=Security%20concern)
FAQ
## Frequently Asked Questions
Common questions about data protection and security at SideUp.
Does SideUp comply with US privacy laws?
We process personal data in line with applicable US privacy laws, including the California Consumer Privacy Act (CCPA). We collect only what we need to run your benefits, use it for clear purposes and keep it only as long as we need to.
Does SideUp sell personal data?
No. We never sell personal data.
Who issues the SideUp card?
SideUp Visa Commercial cards are powered by Stripe and issued by Celtic Bank. You'll find the full details in the Secure payments section above.
Does SideUp store full card numbers?
No. Full card details are handled by our card issuing partners, rather than stored on SideUp's own systems.
Does SideUp hold security certifications?
We're working toward formal security certifications. In the meantime, our security controls are listed on this page, and we're happy to answer your questions as part of your procurement process.
How do I make a privacy request?
Email privacy@sideup.com. Depending on where you live, you may also be able to contact your state attorney general or privacy regulator.
What should I do if my card is lost or stolen?
Contact help@sideup.com right away, and our Customer Success team will help you secure your card.
[](https://sideup.com)
Benefits that work for everyone.
### Products
- [Student Loan & Tuition](https://hi.sideup.com/student-loan-repayment-benefits?hsLang=en)
- [Wellness & Fitness](https://hi.sideup.com/wellness-fitness?hsLang=en)
- [Work from Home](https://hi.sideup.com/work-from-home?hsLang=en)
- [Family Care](https://hi.sideup.com/family-care?hsLang=en)
- [Food](https://hi.sideup.com/food?hsLang=en)
- [Utilities & Essential Bills](https://hi.sideup.com/utilities-essentials-bills?hsLang=en)
- [HRA](https://hi.sideup.com/hra?hsLang=en)
- [Recognition](https://hi.sideup.com/recognition?hsLang=en)
### Platform
- [Manage Benefits](https://hi.sideup.com/how-to-manage-benefits?hsLang=en)
- [Integrations](https://hi.sideup.com/integrations?hsLang=en)
- [Security & Compliance](https://hi.sideup.com/security-compliance?hsLang=en)
- [Ways to spend benefits](https://hi.sideup.com/how-to-spend-your-benefits?hsLang=en)
### Privacy
- [Privacy Policy](https://hi.sideup.com/privacy-policy?hsLang=en)
- [Terms & Conditions](https://hi.sideup.com/terms-conditions?hsLang=en)
### Log in
- [Business Platform](https://hi.sideup.com/admin.sideup.com?hsLang=en)
- [Employee Portal](https://hi.sideup.com/customer.sideup.com?hsLang=en)
[Contact us](https://hi.sideup.com/contact-us?hsLang=en)
SideUp Visa® Commercial cards are powered by Stripe and issued by Celtic Bank. Stripe Issuing balances are provided in the US by Stripe Payments Company, licensed money transmitter, with funds held at Stripe’s bank partners, Members FDIC. 919 North Market Street, suite 950 – Wilmington – DE - 19801
© 2026 SideUp. All rights reserved.
Book a demo
```json
{
"@context" : "https://schema.org",
"@type" : "FAQPage",
"mainEntity" : [ {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "We process personal data in line with applicable US privacy laws, including the California Consumer Privacy Act (CCPA). We collect only what we need to run your benefits, use it for clear purposes and keep it only as long as we need to."
},
"name" : "Does SideUp comply with US privacy laws?"
}, {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "No. We never sell personal data."
},
"name" : "Does SideUp sell personal data?"
}, {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "SideUp Visa Commercial cards are powered by Stripe and issued by Celtic Bank. You'll find the full details in the Secure payments section above."
},
"name" : "Who issues the SideUp card?"
}, {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "No. Full card details are handled by our card issuing partners, rather than stored on SideUp's own systems."
},
"name" : "Does SideUp store full card numbers?"
}, {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "We're working toward formal security certifications. In the meantime, our security controls are listed on this page, and we're happy to answer your questions as part of your procurement process."
},
"name" : "Does SideUp hold security certifications?"
}, {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "Email privacy@sideup.com. Depending on where you live, you may also be able to contact your state attorney general or privacy regulator."
},
"name" : "How do I make a privacy request?"
}, {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "Contact help@sideup.com right away, and our Customer Success team will help you secure your card."
},
"name" : "What should I do if my card is lost or stolen?"
} ]
}
```