Encryption in Transit and at Rest
All data transmitted between patrons, pinpads, cage workstations, and our servers is encrypted using TLS 1.2 or higher. Data stored on platform infrastructure is encrypted at rest using AES-256.
How We Protect the Platform
Six layers, built into the platform from day one.
Role-Based Access Controls
Access to the platform is governed by role-based permissions. Cage staff, supervisors, and system administrators each operate within defined access boundaries. Privileged access is logged and auditable.
North American Cloud Infrastructure
SX2 runs on Google Cloud Platform with data residency maintained within the applicable jurisdiction. Canadian operators' data stays in Canada; US operators' data stays in the United States.
Continuous Monitoring
Platform availability and anomalous activity are monitored around the clock. Automated alerting and on-call response procedures are in place to detect and respond to incidents quickly.
Network Security
Platform infrastructure is protected by firewall rules, network segmentation, and DDoS mitigation controls. Production environments are isolated from development and test environments.
Regulatory Alignment
SX2 operates in alignment with applicable privacy legislation including PIPEDA in Canada and relevant US state privacy laws. Data processing agreements with licensed gaming operators define responsibilities for patron data under their jurisdiction.
Infrastructure
Built in Canada. Hosted in North America.
Gaming operators in the US and Canada operate under strict regulatory requirements. SX2's infrastructure is purpose-built to keep all transaction and operator data within the applicable jurisdiction | not as a feature, but as a baseline requirement.
99.99%
Platform uptime SLA
100%
North American data residency
TLS 1.2+
Minimum transport encryption
AES-256
Data-at-rest encryption standard
Responsible Disclosure
Found a vulnerability?
If you believe you have identified a security issue affecting SX2 platform software or infrastructure, please report it to us directly. We take all reports seriously, investigate promptly, and will work to address confirmed issues in a timely manner.
Security Contact
security@sx2paytech.com
We will acknowledge receipt within two business days and provide a status update within ten business days.