How does Procore Pay collect, secure, and verify sensitive information?
Background 
Procore Technologies, Inc., wants you to be comfortable with our our security and reliability and works to help mitigate risks. To ensure a safe and efficient payment experience, Procore Pay incorporates a multi-layered approach to security, encompassing everything from rigorous verification to proactive fraud prevention.
Answer 
Procore's commitment to Procore Pay security is reflected in the following key measures:
Rigorous Business and Identity Verification 
Procore utilizes established financial institutions and industry-leading FinTech companies to conduct thorough business and identity checks against reliable sources, helping ensure compliance with Know Your Business (KYB) and Know Your Customer (KYC) regulations.
Reliable Bank Account Verification
Procore's verification providers ensure that bank accounts are open, valid, and match the provided information.
Data Tokenization 
Procore Pay uses data tokenization, a widely used security practice for payment process applications. This helps ensure that sensitive information, such as bank account numbers and tax IDs, never resides on our servers to reduce your data breach risks.
Robust Security Measures 
Procore Pay utilizes encryption, firewalls, mandatory Multi-Factor Authentication (MFA), and strong password management to protect your data. Data is stored in secure data centers that are certified to industry standards to maintain compliance and security in the Cloud.
Advanced Transaction Monitoring 
Our partnership with a leading compliance workflow engine provider helps our dedicated team monitor and flag transactions for further investigation.
Fraud Monitoring 
Procore Pay maintains a fraud monitoring program and is included in the feature design measures in the feature design measures to help reduce the risk of fraud. It also requires Multi-Factor Authentication (MFA) to prevent unauthorized access in the payor environment.
Case Handling and Discrepancy Resolution 
When information cannot be verified automatically, our dedicated Payment Operations team collects additional documentationto expedite manual checks by our verification providers.