Security

Security, built in.

Moving money for construction businesses means security can’t be an afterthought. It’s the foundation everything else sits on.

How we protect you
Encryption everywhere
Data is encrypted in transit and at rest using industry-standard protocols.
How we protect you
Business verification
Every party is verified (KYB) before moving money, with representative checks (KYC) as required.
How we protect you
Append-only audit trail
Every transaction is recorded in a tamper-evident, append-only log with integrity checks.
How we protect you
Least-privilege access
Internal access is scoped, logged, and reviewed. No standing access to customer funds movement.
How we protect you
Continuous monitoring
Automated monitoring and alerting watch for anomalous activity around the clock.
How we protect you
Regulated banking partners
Funds move through regulated financial institutions, never held outside the regulated system.
How we protect you

Controls on every transaction.

A layered set of controls protects your money, your data, and your account at every step.

Encryption everywhere

Data is encrypted in transit and at rest using industry-standard protocols.

Business verification

Every party is verified (KYB) before moving money, with representative checks (KYC) as required.

Append-only audit trail

Every transaction is recorded in a tamper-evident, append-only log with integrity checks.

Least-privilege access

Internal access is scoped, logged, and reviewed. No standing access to customer funds movement.

Continuous monitoring

Automated monitoring and alerting watch for anomalous activity around the clock.

Regulated banking partners

Funds move through regulated financial institutions, never held outside the regulated system.

Team roles

Every teammate gets a role.

Roles decide what each person on your team can see and do, and approval limits decide who can release money. Only the owner manages the team and billing.

  • Owner

    Full control of the account, billing, and team. The only role that can manage the team.

  • Admin

    Manages payments and settings. No billing, team management, or account deletion.

  • Manager

    Creates and approves payments up to a set limit. Manages invoices.

  • Member

    Drafts payments and invoices for approval. View-only on reports.

  • Accountant

    Read access to ledgers, exports, and sync. No payment release.

The BuiltXP Roles & permissions screen: five roles — Owner, Admin, Manager, Member, Accountant — and a permission matrix for payments, invoices and rewards
How your funds are held

Where your money actually sits.

01

Held at regulated institutions

Balances are held with regulated partner banks — BuiltXP is the software layer, not the deposit holder.

02

Transit-only movement

Money moves from payer to payee through the network; we don’t hold idle balances we don’t need to.

03

Reconciled continuously

Every movement is reconciled against the ledger so records always match the rails.

04

Privacy by design

We collect what’s needed to move money safely and nothing more. See our Privacy Policy for details.

Security & compliance

Security and compliance, end to end.

The account protections, regulations, and certifications behind every BuiltXP payment.

Account security

We use advanced encryption, multifactor authentication, and continuous monitoring to safeguard your data and transactions.

Regulatory compliance

BuiltXP complies with industry regulations including FinCEN, BSA, AML, and all applicable privacy laws.

Secure payments

All payments are processed through secure, PCI DSS Level 1 certified payment infrastructure.

Certifications & compliance

  • SOC 2 Type II Certified
  • PCI DSS Level 1
  • FFIEC Compliant
  • FinCEN Registered MSB
  • NACHA Member
  • ISO 27001 Certified
  • U.S. Based Infrastructure
Responsible disclosure

Found something? Tell us.

We welcome reports from security researchers and treat them seriously.

Report a vulnerability

If you believe you’ve found a vulnerability, please email us with details and steps to reproduce. We’ll acknowledge your report and keep you updated as we investigate. Please give us reasonable time to remediate before any public disclosure.

Get started

Security you can build on.

Every business is verified before it can move money on BuiltXP.

Captured live from the BuiltXP app — real server data, no mockups. Start free or book a walkthrough.