Razorpay takes the confidentiality of your data extremely seriously, and has adopted several measure to ensure its safety -
We are SOC2 and PCI certified. That means that external auditors have looked at our data practices, and have given their stamp of approval.
We have an in-house security team that periodically runs penetration tests on our entire infrastructure looking for weaknesses, and coordinates with our tech team to ensure everything is patched and kept up to date.
We use Amazon AWS for hosting. All your data is kept on servers in India, behind the best security that Amazon has to offer.
Data backup is done every few hours, and is accessible only in the case of an catastrophic failure (something which has yet to happen to us thankfully!).
Nobody in Razorpay outside of the payroll team has access to your data. This is enforced through access control lists and SSO authentication.
We have never had a securty incident till date, and work hard everyday to ensure it stays that way!