Credit cards visible on the contract

Hi @Kyla Williamson! 

So HoneyBook is a cloud based site integrating best in market practices for securing our users and assets. Working with world leading cloud providers, we benefit from a data center and network architecture built to meet the requirements of the most security-sensitive organizations.

HoneyBook uses SSL protocol for securing communication across the Internet, providing both confidentiality and integrity through server authentication and encryption.

Storing user data: HoneyBook uses dedicated database infrastructure residing on the same secure network as our application servers. Cloud security group configuration acts as a firewall that controls the inbound traffic to our database. All user sensitive data is secured using salted password hashing allowing us to block malicious injection attacks.

Payment Security: HoneyBook's payment system integrates with Stripe, a leading American technology company, operating in over 20 countries, allowing both private individuals and businesses to accept payments over the Internet. Stripe has been audited by a PCI-certified auditor and is certified to PCI Service Provider Level 1. This is the most stringent level of certification available in the payments industry. When using HoneyBook's payment system, all sensitive data is transferred directly to Stripe servers over a secured and encrypted channel, fully complying to US regulations. HoneyBook does not store bank accounts or credit card info to make the system even more reliable to our users. Please note that credit card information collected in contracts and agreements does not fall into this category because it is not being collected through the payment system.

Let me know if you have any other questions!