Security
Your money goes only where you said.
Pioneer books on your cards, never holds your money, and locks every trip card to its dates, its budget and the merchants a trip needs.
·· 4417
Trip card · Oct 13–18
Austin offsite
What this card can pay for
- Lodging Allowed
- Airfare and rail Allowed
- Ground transport Allowed
- Meals $79 a day
- Cash withdrawals Refused
- Gift cards and transfers Refused
Declined, as it should be
ATM withdrawal · Austin · Oct 15, 11:48 PM CT
Where the money can go, written down
Every trip card is locked to its trip: its dates, its budget, and the kinds of merchants a trip needs. Everything else is refused before it is charged.
-
01
We never hold your money
Trips are paid on your cards or on virtual cards issued in your company's name. Pioneer moves no funds of its own and keeps no balance.
-
02
Cards that expire with the trip
A trip card works only between its trip's dates and only up to its budget. It closes the day after the trip ends, and its number is useless after that.
-
03
Card numbers we never see
Full card numbers stay with the card issuer. Pioneer stores a token and the last four digits, which is all it needs to match a charge.
-
04
Encrypted, in the United States
Data is encrypted in transit and at rest, and stored in US data centers in Oregon and Virginia. Backups are encrypted and tested every month.
-
05
Every action has a name on it
Bookings, approvals, policy edits and exports are written to an audit log with who, when and why. Company plans can export it at any time.
-
06
Audited once a year
An independent firm reviews our controls every year. The latest report covers Jan 1 to Dec 31, 2025, and is yours to read under NDA.
Questions IT asks first
Anything not covered here, write to [email protected]. A person reads it within the hour.
[email protected]Who can see a traveler's trips?
The traveler, the person who owns the trip's budget and your admins. Nobody at Pioneer opens a trip unless you ask us to, and each time is logged.
Do you support single sign-on?
Yes. Company plans include SSO with any SAML provider and SCIM, so people get access on their first day and lose it on their last.
What happens to a card if a phone is lost?
Freeze it in one tap from any other device, or ask an admin to. A new number is issued for the rest of the trip, with the same budget and dates.
Can we delete our data?
Yes. Admins can export everything and then delete the workspace. We erase it within 30 days, backups included, and send you a confirmation.
How do we report a security issue?
Write to [email protected]. A person reads it within the hour, day or night, and we reply with what we found and what we changed.
Try it on one trip first
Book a single trip on a card locked to its budget and dates, and see every control for yourself. Free for up to 8 travelers.