Security

Our systems are designed so that only authorized users can take authorized actions, and with end-to-end encryption that protects all parties involved.

For more information on DAFpay security standards, see DAFpay Security.

Secure by Design

1

Interaction

Chariot’s technology is built to only interact with the fields or details required to complete a task. For example, our DAFpay technology interacts only with fields in a portal that are needed to submit a grant request.

2

Access

Chariot follows the "principle of least privilege", meaning that access to Chariot's systems are, by default, restricted, and only granted on an as-needed, per request basis. This is true for both our clients and our internal team. All users accessing Chariot’s dashboard must have Multi-Factor Authentication (MFA) enabled to login. Chariot’s staff is also required to have MFA enabled for all internal tools and systems.

Built with the Best

1

Modern Technology

Chariot is hosted on AWS cloud infrastructure in the United States, leveraging years of safety enhancements to ensure maximum performance, resilience, and speed of deployment.

2

Encryption

Information that Chariot’s technology passes through, but does not store, (e.g. login credentials in DAFpay) is fully encrypted in both directions. We use a combination of the Transport Layer Security (TLS) and Advanced Encryption Standard (AES-256) to keep your personal information safe.

3

Monitoring

Chariot's infrastructure is continuously monitored using industry-leading intrusion detection systems that provide alerts for control breaches or when infrastructure needs attention. Our 24/7 on-call team ensures all alerts are acted on promptly.

4

Expert Advisory

Oneleet, a leading cyber security advisory firm, performs system monitoring and hosts our public trust center for maximum transparency.

External Review

1

Third-Party Audits & Testing

• SOC 2, Type 2 Compliant

• Third-Party Penetration Tests

• Documentation available upon request via our trust center

2

InfoSec Diligence By Customers

Chariot has undergone rigorous vendor review processes with dozens of major hospital systems, universities and large multinational organizations.

3

Bank Partner Program

Chariot is a financial technology company, not a bank. We are a program of Column N.A., Member FDIC, which ensures that we adhere to strict security standards with ongoing monitoring and review.

At Chariot, Security Comes First

Chariot builds its products with security and transparency in mind. Review our security documentation to learn more.