Pay bills securely without worrying about fraud.

1. Pay bills securely without worrying about fraud. Bill.com moves over $50 billion annually, so we take financial security seriously. Our bank compliance, data security, encryption and fraud prevention measures are optimized to the highest industry standards.

2. We provide six layers of protection to guard your money and sensitive information at Bill.com Physical Protections Network Protections Data Protections Application Protections Payments Protections Process Protections

3. Physical Protections Controlled access: our servers are in high-security locked facility with biometric access controls. Employees must have an ID card, a PIN, and a full hand scan on file in order to enter the facility. All Bill.com employees go through a background check. Guards and video surveillance 24 hours a day, 365 days a year.

4. Network Protections • Firewalls and intrusion-detection devices prevent unauthorized electronic access to servers.

5. Data Protections Your data is secured and protected with the same encryption that banks use. For quick disaster recovery, your data and documents are stored on redundant servers which immediately make two copies of everything. We encrypt all sensitive information stored in our database. We also back up the data to separate media and regularly move a copy of the backups to a second secure facility.

6. Application Protections **** **** When using Bill.com, each user's access to data and documents is defined by the user roles and permissions you assign them. You, your vendors, and your customers never need to share bank account information in order to facilitate payments via Bill.com. Eliminating filing cabinets and paper documents automatically eliminates a major security vulnerability. We employ multi-factor authentication (MFA) to prevent fraudulent access to your Bill.com account.

7. Payments Protections All payments are made through Bill.com, so your bank account and routing numbers are never exposed Positive Pay works at the bank level to assure that altered checks will not be paid Eliminating paper checks eliminates check theft BILL.COM CONFIDENTIAL |

8. Process Protections Regular completion of SOC 1 (Type 2) and SOC 2 (Type 2) Audit on our security controls. All funds are FDIC insured. PCI DSS Compliance as a Service Provider by a Qualified Security Assessor (QSA). Bill.com's applications use SSL encryption certificates issued by trusted certificate authorities.

9. Bill.com is SecureWe use the same technology, processes, and protections applied by leading financial institutions Your client financial data and documents are safer on our secure, encrypted servers than they are in filing cabinets and desk drawers. Safeguard client data Never share bank info All payments – checks and electronic – are made through the Bill.com account. Prevent theft Eliminating paper checks eliminates check theft. Prevent fraud Bill.com enforces Positive Pay at the bank level to assure that altered checks will not be paid. Be secure on the go Securely access data on mobile devices with support for TouchID and passcode authentication.