Security
Security is our foundation
Your company’s money and financial records are protected by bank-grade encryption, strict access controls and independently audited security standards. Your data belongs to you.
Certified and independently audited
We hold ourselves to the same standards as banks and card networks, and we let independent auditors check our work.
ISO/IEC 27001:2022
The international standard for information security management. Our information security management system is independently audited, covering how we assess risk, protect information and respond to incidents.
Verify certificate
PCI DSS
The Payment Card Industry Data Security Standard sets strict requirements for any company that handles card data. Card information on Monit is stored, processed and transmitted to this standard.
View certificate
Komdigi PSE
Monit is registered as an electronic system operator (PSE) with Indonesia’s Ministry of Communication and Digital Affairs.
View PSE registryHow we protect your business
Security is built into every layer of Monit, from how we store data to who can approve a payment.
Encrypted data
Data is encrypted in transit and at rest. Passwords are hashed with PBKDF2 using 100,000 iterations and salted against rainbow table attacks, and sensitive information is secured with split-key encryption, with partial keys held by different employees.
Secure network
All public web traffic is sent over Transport Layer Security (TLS) with HSTS. Communication between data centers is protected with Internet Protocol Security (IPsec) using AES-256.
Two-factor authentication
Every sign-in is protected with two-factor authentication, so a stolen password alone is never enough to reach your company’s account.
Role-based access
Assign roles such as admin, approver or cardholder. Each person only sees and does what their role allows, so access always matches responsibility.
Funds at a licensed bank
Funds are held in giro accounts provided by BCA Digital, a licensed partner bank and member of LPS. Monit never holds your money directly.
Licensed payment partners
Payment services are provided by multiple payment providers licensed by Bank Indonesia, so every transfer runs on regulated infrastructure.
Security questions
Is my money safe with Monit?
Funds are held in giro accounts provided by BCA Digital, a licensed bank. Monit never holds your money directly, and deposits are covered by LPS deposit insurance.
How does Monit protect my data?
Data is encrypted in transit and at rest, and access is protected with two-factor authentication and role-based permissions. Our security management is ISO/IEC 27001:2022 certified.
Is card data handled securely?
Yes. Monit is PCI DSS compliant, the security standard required for companies that store, process or transmit card data.
Can I control what each team member sees?
Yes. Assign roles such as admin, approver or cardholder, and each person only sees what their role allows.