Pay bills more securely without worrying about fraud.

1. Pay bills more securely without worrying about fraud. Bill.commanages $70 billion annually, so we take financial security seriously. Our bank compliance, data security, encryption and fraud prevention measures are optimized to the leading industry standards.

2. We provide variouslayers of protection to guard your money and sensitive information at Bill.com Physical Protections Network Protections Data Protections Application Protections Payments Protections Process Protections

3. Physical Protections Controlled access: our servers are in high-security locked facility with biometric access controls. Employees must have an ID card, a PIN, and a full hand scan on file in order to enter the facility. All Bill.com employees go through a background check. Guards and video surveillance 24 hours a day, 365 days a year.

4. Network Protections • Firewalls and intrusion-detection devices prevent unauthorized electronic access to servers.

5. Data Protections Your data is secured and protected with the same encryption that banks use. For quick disaster recovery, your data and documents are stored on redundant servers which immediately make two copies of everything. We encrypt all sensitive information stored in our database. We also back up the data to separate media and regularly move a copy of the backups to a second secure facility.

6. Application Protections **** **** When using Bill.com, each user's access to data and documents is defined by the user roles and permissions you assign them. You, your vendors, and your customers never need to share bank account information in order to facilitate payments via Bill.com. Eliminating filing cabinets and paper documents automatically eliminates a major security vulnerability. We employ multi-factor authentication (MFA) to prevent fraudulent access to your Bill.com account.

7. Payments Protection Payments are made through Bill.com, so your bank account and routing numbers are not exposed Positive Pay works to assure that altered checks will not be paid Eliminating paper checks eliminates check theft BILL.COM CONFIDENTIAL |

8. Process Protections Bill.com's applications use SSL encryption certificates issued by trusted certificate authorities. PCI DSS Compliance as a Service Provider by a Qualified Security Assessor (QSA). Regular completion of SOC 1 (Type 2) and SOC 2 (Type 2) Audit on our security controls.

9. Bill.com is SecureBill.com is designed with your security and privacy Your client financial data and documents are safer on our encrypted servers than they are in filing cabinets and desk drawers. Safeguard client data Keep bank info private All payments – checks and electronic – are made through the Bill.com account. Prevent theft Eliminating paper checks eliminates check theft. Prevent fraud Bill.com enforces Positive Pay to assure that altered checks will not be paid. Be more secure on the go More securelyaccess data on mobile devices with support for TouchID and passcode authentication.