Paying a bill or have a question about your account? Make a paymentConsumer help
Paying a bill or have a question about your account? Make a paymentConsumer help
See operating controls, audit evidence, and technical documentation your security team can verify—live. No slides. No marketing speak. Just transparent access to the security infrastructure protecting your most sensitive data.
Evidence over assurances. Controls you can verify. A partner that welcomes scrutiny.
Segmented zones, hardware‑key 2FA, and IDS/IPS reduce lateral movement and surface threats fast.
PCI DSS 4.0 Service Provider Level 1 attestation, with artifacts available under NDA.
Immutable logs, searchable audit trails, and walkthroughs designed for CISOs and security leaders.
Target RTO for critical operations
Target RPO • backup intervals
Availability target
SFTP/SSH with AES‑compatible encryption, certificate auth, IP allow‑listing, and immutable transfer logs.
Segmented zones (SafeNet/DMZ/Production/Admin), continuous SIEM monitoring, automated quarantine.
DTMF masking, secure IVR capture, and call recording with role‑based access & auditability.
Every exchange travels through encrypted channels. Connections are restricted to approved certificates and IP ranges, and every transfer is logged with timestamps, user, and file metadata.
Every exchange travels through encrypted channels. Connections are restricted to approved certificates and IP ranges, and every transfer is logged with timestamps, user, and file metadata.
All data exchanges use SFTP/SSH protocols with AES-compatible encryption. We do not accept unencrypted FTP, email attachments containing sensitive data, or insecure web uploads under any circumstances.
Access is controlled through certificate-based authentication and IP whitelisting. Each connection generates immutable logs including timestamps, authenticated user identities, transferred files, and transfer status. Our security team monitors these logs in real-time through SIEM dashboards that alert on anomalies
Yes. TSI holds independent attestations, including PCI DSS 4.0 Service Provider Level 1 for payment card processing and SOC 1 Type 2 and SOC 2 Type 2 attestation reports. TSI previously received a federal Authorization to Operate, and its controls are mapped to NIST SP 800-53.
Current audit reports, attestation letters, and certificates are available for review under mutual non-disclosure agreement. We provide these documents routinely during vendor risk assessments and can coordinate direct auditor-to-auditor communications when needed.
TSI operates across the United States through multiple secure facilities, each implementing consistent security controls validated through identical third-party audit procedures. Our distributed architecture provides geographic redundancy while maintaining unified security governance through centralized SOC monitoring.
We share specific facility locations and detailed security specifications during vendor assessments under appropriate confidentiality protections. Facility tours can be arranged for qualified prospects and clients following security briefing and visitor approval procedures.
We’ll tailor the session to your framework and evaluation criteria. Your information will only be used to coordinate the walkthrough.
