Security & Trust

Payments processed by Stripe

All payments are handled entirely by Stripe, a globally trusted payment provider used by millions of businesses including Amazon, Google, and Shopify. We never see or touch your card number.

PCI-DSS Level 1 Compliant

Stripe is certified PCI-DSS Level 1 — the highest level of payment card security. Your card data is encrypted in transit and at rest using industry-standard AES-256 encryption.

We never store card data

Kirasame Sora does not store, log, or have access to your credit card number, CVV, or expiry date. The only payment information we store is a Stripe transaction reference ID and your email for receipt purposes.

Redirected to Stripe Checkout

When you click 'Pay', you are redirected to Stripe's secure hosted checkout page (stripe.com domain). You can verify the padlock and URL in your browser before entering any payment details.

SSL/TLS Encryption

All communication between your browser and our servers is encrypted using TLS 1.2+. Look for the padlock icon in your browser address bar — your data is always encrypted in transit.

Encrypted database at rest

Your billing CSV data and reports are stored on Neon (PostgreSQL) with encryption at rest. Access is restricted to authorised application services only.

Your CSV data stays private

Your cloud billing CSV is only used to generate your audit report. It is processed in memory and not stored permanently on our servers.

Authentication by Clerk

User authentication is handled by Clerk, an enterprise-grade auth provider. We do not store passwords — login is managed via secure email or OAuth providers.