Pleo offers bank level data protection; its data centre is PCIDSS Level-1 compliant as mentioned on its website. The cardholder information is protected with industry standard encryption. The information transmitted between Pleo’s servers and 3rd-party servers is 2048-bit encrypted, and the data related to card transactions passes through VPN- tunnels to the most and stringent of all PCI DSS levels- Level 1.