PPR operates on servers that comply with strict standards. The standards include PCI DSS Level 1.
Access to critical 3rd party software providers used by PPR are limited to Managerial level staff only and protected by 2 factor authentication.
Data is stored in the EU region by default on Paragon Internet Group (trading as Tsohost) (‘Paragon’) servers and is continuously backed up. Paragon’s data centres are protected by physical access controls which includes a 3m perimeter fence, 25+ CCTV cameras, 24/7 personnel and electronic access control systems.
Connections to PPR are encrypted using 256-bit SSL with integrity assured by the SHA2 ECDSA algorithm.
More information on the hosted servers can be found here