Built to be
trusted with
a city.
ParkCanvas is built for airports, councils and major operators. Security and reliability aren't a feature — they're the foundation. Here's how we protect your data, your customers and your revenue.
Payments security
Card payments are handled by a PCI-DSS compliant payment provider. Cards are tokenised and vaulted with the provider — ParkCanvas never stores raw card numbers, keeping us in PCI SAQ-A scope.
- Tokenised card-on-file
- No raw card data stored
- 3-D Secure / SCA supported
Data protection
All traffic is encrypted in transit with TLS, and data is encrypted at rest. Each operator's data is isolated by organisation, so one tenant can never see another's.
- TLS 1.2+ in transit
- Encrypted at rest
- Strict per-tenant isolation
Access & accounts
Role-based access control limits each team member to what they need. Single sign-on is available, and every change is written to an immutable audit log.
- Role-based access (RBAC)
- SSO available
- Full audit trail
Reliability
ParkCanvas runs on a globally distributed edge with redundant infrastructure and continuous monitoring, so your operation stays online around the clock.
- Global edge delivery
- Continuous monitoring
- Resilient, redundant infra
Privacy & compliance
We collect only what's needed to run your parking, honour data-subject requests, and keep a current list of subprocessors. Data residency options are available for regulated operators.
- Data-minimisation by design
- Subprocessor transparency
- Residency options
Resilience & recovery
Automated backups and tested recovery procedures protect your data, with retention windows you can align to your own policies.
- Automated backups
- Tested recovery
- Configurable retention
Found something? Tell us.
We welcome reports from the security community. If you believe you've found a vulnerability, email security@parkcanvas.com and we'll work with you to verify and resolve it quickly. Please give us reasonable time to remediate before any public disclosure.
Run it with confidence.
We're happy to walk your security and procurement teams through our controls and share documentation under NDA.