Is the platform secure?

We have in place the same level of security online banking employs, using HTTPS to ensure that your data is securely transmitted. In addition, Data protection is one of our highest priorities and we fully comply with Singapore's PDPA regulations.

getArrange.com forces HTTPS for all services using TLS (SSL). We use HSTS to ensure browsers interact with getArrange.com only over HTTPS. Other security measures include Cross site scripting (XSS) protection, Cross site request forgery (CSRF) protection, SQL injection protection just to name a few.

We host on Amazon Web Services (AWS) inheriting all the best practices of AWS policies, architecture, and operational processes adhering to IT security standards such as SOC 1/ISAE 3402, SOC 2, SOC 3,FISMA, DIACAP, and FedRAMP, PCI DSS Level 1, ISO 9001, ISO 27001, ISO 27017, ISO 27018. Our payment provider, Stripe has been audited by a PCI-certified auditor and is certified to PCI Service Provider Level 1. This is the most stringent level of certification available in the payments industry.

Although we have put in placed many strict security measures into our servers, including operational control procedures, it can only be as secured and protected as the weakest link. For users, you can play your part for example by ensuring that your email and password are not compromised and that you do not fall prey to scams (always try to confirm the source of request and whether they are genuine).