Security is not a feature.
It's the foundation.
Institutional custody, incident response, cryptographic controls and 24/7 monitoring. Each layer was designed so that a single point of failure does not turn into a disaster.
Security pillars
Six layers. Zero shortcuts.
Institutional custody
Assets held in cold wallets with regulated partners. Accounting segregation and 1:1 reserve — your balance does not finance our operations.
Serious KYC and AML
We comply with Brazilian regulations to prevent laundering and financing of terrorism. It's work, but it protects the entire operation.
Incident response
Defined runbooks, clear customer communication and a public post-mortem whenever something goes off-script. Transparency is commitment, not marketing.
Distributed keys
No single person can move reserves. Multi-sig and threshold signing in critical controls.
Encryption in everything
TLS in transit, AES at rest. Tokenized PII. Internal access with the principle of least privilege and audit log.
24/7 monitoring
Security operations team monitoring anomalous transactions, attempted unauthorized access and fraud indicators in real time.
FAQ
What people ask.
Is my balance really safe?
We custody your assets with institutional partners who maintain 1:1 reserves. This doesn't eliminate all risk (crypto has price volatility), but it eliminates the risk of "not having the asset there" when you want to withdraw.
What if PangeaPay goes bust?
Client assets are accounting segregated and held in custody by third parties. In a Pangea insolvency scenario, customer balances are separated from the company's operating assets.
Have you ever been invaded?
To date, no incident of customer fund loss. We will publish a public post-mortem if one happens — transparency is commitment, not marketing.
How do they protect against insider attacks?
No employee has unilateral access to reservations. Critical operations require multiple approvers, immutable logging, and periodic review.
Report vulnerability
Found something that seems out of place? Send it to security@pangeapay.org. We treat it as a priority and respond quickly.