Security and operational resilience are built into the Dream platform.
This page explains the current website-level approach. Product programs are governed by their own agreements and notices.
Security program
Dream maintains a formal security and risk program with access controls, change management, monitoring, incident response, vendor oversight, and business continuity practices.
Independent assurance
Dream Payments maintains SOC 2 Type II assurance. Reports and supporting documentation may be made available to qualified customers under appropriate confidentiality terms.
Data protection
The platform uses encryption in transit and at rest, controlled access, audit logging, and secure software-development practices. Specific controls and data-residency arrangements vary by program.
Payment infrastructure
Payment movement and settlement are provided through approved banking and payment-rail partners under program-specific arrangements.
Responsible disclosure
To report a suspected security issue, contact support@dreampayments.com with enough detail for the team to investigate. Do not access, alter, or retain data beyond what is necessary to demonstrate the issue.
Availability and resilience
Dream maintains business continuity and disaster-recovery procedures and tests recovery capabilities. Program-specific commitments are set out in customer agreements.