Company: FLYW
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0000950170-25-027078
Chunk: 90

Company: Flywire Corp
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1
Chunk 90
---
B market and were able to leverage engineering solutions and APIs in our other verticals, including a native module integrated into NetSuite. Our technology enables us to process transactions in real-time, regardless of origin, destination or amount. For example, in education, our deep, customized integrations within our clients’ systems can lead to the difference between on-time enrollment or missed registrations—a difference that cannot be delivered through batch processes that are not posted instantaneously. We leverage Amazon Web Services (AWS) for our cloud redundancy, and tools such Pingdom, Cloudflare, and PagerDuty for an uninterrupted experience for our clients and their customers. 

Our Compliance and Risk Management Foundation 

We have a dedicated compliance and risk management function. We have implemented the practices to help us protect our business and assure our clients and payment partners that our processes are compliant and meet or exceed their exacting standards, including advanced and agile practices for risk governance and a monitoring program that leverages key data inputs and software. We have robust AML, suspicious activity reports (SARs) and client KYC procedures. We also devote considerable resources to our data and cyber security. In addition, we possess key certifications across the verticals we serve, which we believe is an important aspect of why our clients choose to work with us. These audit-tested certifications and risk program features, which in many cases apply with specificity to the verticals we serve, include: third party certifications for Service Organization Control 2 (both SOC 1, Type II and SOC 2, Type II), Payment Card Industry Data Security Standard (PCI DSS), and Americans with Disabilities Act (ADA) compliance, HITRUST Common Security Framework certification (Particularly relevant to our healthcare vertical), as well as systems and processes designed to ensure compliance with the General Data Protection Regulation (GDPR) in Europe, the Data Security Law (DSL) and Personal Information Protection Law (PIPL) in China, the California Consumer Protection Act (CCPA), the Personal Information Protection and Electronic Documents Act in Canada, Family Educational Rights and Privacy Act (FERPA), and Health Insurance Portability and Accountability Act (HIPAA), among others. 

Our experienced team, coupled with our advanced technology and software tools, helps us navigate the challenges of global payments in a compliant manner: 

•Local and global regulatory regimes.    We believe we are able to react nimbly to global and local regulatory changes that affect our business. 

Locally, we often work with licensed and regulated payment service providers (PSPs) to