Certificate Policy#

View as Markdown

GoCardless enforces HTTPS for all API communications using TLS. Certificates are currently provided by Google Trust Services (GTS Root R1 CA).

Verifying the Certificate#

You can verify the current certificate being served by GoCardless using the openssl command:

openssl s_client -connect api.gocardless.com:443 -showcerts

This will output the certificate chain, including the root CA.

Change Notification#

Any changes to the certificate configuration — including changes to the CA provider — will be announced on the GoCardless status page with at least 2 weeks' notice. Subscribe to the status page to receive notifications.

What's next#

Security Requirements

Review the security requirements for accessing bank account details.

Learn more

Making Requests

Learn how to authenticate and structure API requests to GoCardless.

Learn more