We built our platform with security in mind.

  • Our platform puts you in control of your information.
  • Transactions do not pass sensitive financial information to recipients, removing significant information security risk.
  • We utilize tokenization that replaces high-value data in a financial transaction with a time-based, tokenized message.
  • Our platform and systems are monitored and undergo routine penetration and intrusion testing to protect our community.
  • We offer two-factor authentication, an optional feature that helps safeguard your account at login.

We partner with industry leaders.

  • When you register or log in to Dwolla, we confirm your browser is running TLS 1.0 or higher, which secures the communication from your browser to Dwolla.
  • Your data resides on servers that are protected both physically and electronically.
  • Our platform edge is equipped with strong cipher suites controlled by Transport Layer Security (TLS).
  • Our platform stores sensitive data at rest using strong cryptography provided by the Advanced Encryption Standard (AES) with 256 bit keys, Galois Counter Mode (GCM) and ongoing key rotation.
  • The platform sits behind layers of controls including firewall and intrusion protection.

We learn and adapt.

  • The team continues to follow, enhance and improve our security policies, procedures, and routinely updates our platform and business processes.
  • We complete (at a minimum) annual, required security awareness training and deliver OWASP Top 10 training to our engineering team.
  • Our platform follows a responsible disclosure process to support and manage concerns reported by the community.
  • If you have questions or concerns regarding security at Dwolla, please contact security@dwolla.com, or use our public PGP key here.

See why businesses, financial institutions, and organizations of all sizes trust Dwolla.

Financial institutions play an important role in our network.

Dwolla, Inc. is an agent of Veridian Credit Union and Compass Bank and all funds associated with your account in our network are held in pooled accounts at Veridian Credit Union and Compass Bank. These funds are not eligible for individual insurance, including FDIC insurance and may not be eligible for share insurance by the National Credit Union Share Insurance Fund. Dwolla, Inc. is the operator of a software platform that communicates user instructions for funds transfers to Veridian Credit Union and Compass Bank.