Last updated: September 26, 2026
1. Our approach
ListenPay serves organizations in regulated industries, including healthcare, energy, manufacturing, and financial services. Our security program is designed around the same frameworks our customers answer to.
2. Data protection
- Data is encrypted in transit using TLS
- Customer data is encrypted at rest
- Customer data is logically separated by organization
- We practice data minimization and track participation, not personal health details
3. Access control
- Role-based access for administrators, managers, and learners
- Least-privilege access for ListenPay personnel
- Access to production systems is logged and reviewed
4. Infrastructure
The Services run on established cloud infrastructure providers, with monitoring, backups, and redundancy designed to keep the Services available and recoverable.
5. Application security
We follow secure development practices, including code review, dependency management, and testing before release.
6. Incident response
We maintain an incident response process. If an incident affects customer data, we will notify affected customers as required by law and by our agreements.
7. Responsible disclosure
If you believe you have found a security vulnerability, please email hello@listenpay.com with the subject "Security report." Please give us reasonable time to investigate and fix the issue before disclosing it publicly.
8. Questions
Customers and prospects can request more detail about our security practices by contacting hello@listenpay.com.