Come build the future with Rain.
View open roles
MoneyGram Card goes live on Rain
Read more
Security

Security at Rain

Rain’s security team builds, tests, and monitors the infrastructure behind every card program. We work with independent auditors to verify that work and partners have a direct line to our team at all times.
Security controls
Card data tokenized
Wallets screened
Events monitored

Built on trusted
global infrastructure

Visa Principal Member
Mastercard Principal Member
SOC 2 Type II
PCI DSS
Reports and attestations are available to partners on our trust center. Visit our trust center

How we protect Rain and our partners

How our security engineering team monitors, tests, and protects Rain’s platform across every chain we support.
Onchain

Smart contract audits

Our smart contracts are reviewed by independent auditors before launch and again for each new chain we support.
How we secure our smart contracts
Onchain

Onchain monitoring

Our in-house security team monitors activity across the chains we support in real time.
Securing Rain's onchain stack
Onchain

Key management

Signing keys are held in managed key storage with tightly controlled access.
Platform

Secure development

Code is peer-reviewed and automatically scanned for vulnerabilities before it reaches production.
Platform

Card data protection

Card data is handled in an environment assessed against PCI DSS, and sensitive payment data is tokenized.
Operations

Detection and response

Security events are monitored centrally, and a documented incident response plan guides how we act and keep partners informed.
Service status

Security reports and policies

Partners and prospective partners can request our SOC 2 report, PCI DSS attestation, penetration test summary, and security policies through our trust center.

Report a vulnerability

If you believe you've found a security vulnerability in a Rain product or service, email vdp@rain.xyz with the affected system, steps to reproduce, and what you observed.

Contact

Security vulnerabilities
Security vulnerability on a Rain-issued card
Contact the company whose app or card you use
Privacy questions
Everything else
This is a high-level overview of how we secure Rain. Detailed controls and reports are available to partners through our trust center.