Hi @hshah2811
Dwolla protects sensitive data in-transit, at-rest, and throughout a transaction using a combination of cryptographic protections and tokenization. Dwolla requires strong Transport Layer Security (TLS) with downgrade protection for data in-transit. Dwolla protects data at-rest through a cryptographic service that uses strong symmetric encryption (AES 256, GCM with ongoing key rotation), and removes high-value data within a transaction using a time-based token.
For more information on Dwolla’s approach to data security visit https://www.dwolla.com/security/