Rain’s security team builds, tests, and monitors the infrastructure behind every card program. We work with independent auditors to verify that work and partners have a direct line to our team at all times.
Partners and prospective partners can request our SOC 2 report, PCI DSS attestation, penetration test summary, and security policies through our trust center.
If you believe you've found a security vulnerability in a Rain product or service, email vdp@rain.xyz with the affected system, steps to reproduce, and what you observed.