Your financial information is scrambled with strong encryption whenever it is stored or sent, so it is unreadable to anyone without permission.
Data moving between your device and Finistack travels over encrypted connections.
MCSBPCI DSS
Everything we store, including databases and file storage, is encrypted automatically.
MCSBPCI DSS
Encryption keys are kept in a protected vault and rotated under strict rules.
MCSB
Website and service certificates are issued, tracked and renewed securely.
MCSB
Unusual attempts to reach sensitive data are detected and flagged.
MCSB
Any stored account numbers are secured wherever they are kept.
PCI DSS
Our storage accounts and databases pass Finistack’s own security policies.
Finistack policy
We collect only what we need, protect it carefully and tell you promptly if anything ever goes wrong.
Privacy protections are built into Finistack from the start and switched on by default.
GDPR
Personal data is handled with security measures matched to its sensitivity.
GDPR
Finistack takes responsibility, as data controller, for how your data is used.
GDPR
Any partner that handles data for us is bound by the same protections.
GDPR
If a breach occurs, we notify the relevant authority within required timeframes.
GDPR
If your data is affected, we tell you directly and explain what to do.
GDPR
Information moves only to people and systems authorized to see it.
SOC 2
Only the right people can get in, and only to what they need. That applies to you and to every member of our team.
Multi-factor authentication protects both user and administrator accounts.
MCSBPCI DSS
All access runs through one protected identity system with single sign-on.
MCSB
People get the minimum access their role needs, and nothing more.
MCSBSOC 2PCI DSS
Administrator access is separated, limited and granted only when needed.
MCSB
Passwords and API keys are never stored in code or exposed.
MCSB
Access is granted, reviewed and removed as team members join, move or leave.
MCSB
Sign-ins are checked against location, device and risk before access is allowed.
MCSB
A tightly controlled break-glass process exists for urgent situations.
MCSB
The systems that run Finistack are walled off, filtered and watched to keep attackers out.
Our systems are divided into isolated zones so a problem in one can’t spread.
MCSBPCI DSS
Malicious web traffic is filtered before it reaches Finistack.
MCSBPCI DSS
Defenses absorb floods of traffic meant to knock services offline.
MCSB
Suspicious network activity is spotted and blocked automatically.
MCSB
Outdated, unsafe connection methods are found and turned off.
MCSB
Modern anti-malware and endpoint detection run on our systems and stay up to date.
MCSBPCI DSSSOC 2
Physical access to servers is controlled by Microsoft Azure’s secured facilities.
PCI DSS
Our AI services accept connections only from an approved allow list.
Finistack policy
We watch for threats around the clock and have a tested plan to act fast if something happens.
Automated tools look for attacks across our systems and sign-ins, 24/7.
MCSBSOC 2
Security events are collected in one place and kept for investigations.
MCSBPCI DSS
Networks, databases, AI services and key vaults all record audit trails.
Finistack policy
A written incident plan defines who does what when an alert fires.
MCSBSOC 2PCI DSS
Incidents are investigated, prioritized and contained, with automation where possible.
MCSBSOC 2
After every incident we review what happened and keep evidence to improve.
MCSB
Security is built into how we design, write and release software, not bolted on afterward.
New features are reviewed for security risks before they are built.
MCSB
Third-party code and libraries are vetted before we use them.
MCSB
Code is tested for security flaws automatically before each release.
MCSBPCI DSS
Changes to software, data and infrastructure are reviewed and approved.
SOC 2
Weaknesses are found, prioritized and fixed quickly.
MCSBPCI DSS
Security specialists regularly try to break in so we can fix gaps first.
MCSBPCI DSS
Every system must match an approved secure setup, and drift is corrected.
MCSBPCI DSS
Your data is backed up automatically and we regularly prove we can restore it.
Data is backed up automatically on a regular schedule.
MCSB
Backups are encrypted and shielded from tampering or deletion.
MCSB
Every backup job is monitored so failures are caught right away.
MCSB
We regularly test restoring from backup to make sure it works.
MCSB
Defined steps get services back to normal after a security event.
SOC 2
Fini, our AI finance assistant, runs with guardrails that keep its answers safe and its access limited.
Several layers of filtering screen what goes into and comes out of the AI.
MCSB
Fini follows safety rules designed to keep its responses appropriate.
MCSB
AI agents can only reach the data and actions they truly need.
MCSB
People stay in control of important decisions; the AI does not act alone.
MCSB
AI usage is monitored to detect misuse or unexpected behavior.
MCSB
We regularly test Fini against attempts to trick or misuse it.
MCSB
Clear policies, ownership and risk management keep security a company-wide priority.
A written policy guides how everyone at Finistack protects information.
PCI DSSSOC 2
Security responsibilities and accountability are clearly assigned.
MCSBSOC 2
Risks are identified, evaluated and managed on an ongoing basis.
PCI DSS
We keep an up-to-date inventory of our systems and their risks.
MCSB
Only reviewed and approved cloud services and applications are allowed.
MCSB
Outside support staff need explicit approval before accessing anything.
MCSB
