Payment security is a legitimate consideration for any software subscription, and it is worth understanding what the relevant standards actually mean.
Peak Output processes payments through Stripe, a widely used payment gateway operating under PCI DSS, the industry-wide compliance standards governing how card data is collected, stored, and transmitted. Stripe's compliance is independently audited, not self-reported.
PCI DSS compliance ensures encryption of data in transit, tokenisation, multi-factor authentication, and fraud detection monitoring. It does not cover the security of broader platform data, which is governed by separate privacy policies available to review before you subscribe.
No payment system eliminates risk entirely. Stripe is one of several processors meeting this standard, others include Braintree and Adyen. If security is a significant concern, we recommend reviewing the full security documentation before proceeding.