Is data encrypted at rest?


Data is encrypted at rest using AES 256.


Is data encrypted in transit?


Data is encrypted in transit using minimum TLS 1.2.


How are encryption keys managed?


The key management of Service-Managed keys for data at rest encryption is performed by Azure. The certificates used for data in transit encryption are managed using Azure Key Vault by Fininly and are subject to Fininly's cryptography policy.


Where is data stored?


Fininly is clustered into regions to provide enhanced availability, customers can select a region for data storage. Once selected, the data storage cannot be moved.

Function Description
Public Cloud Service Provider Microsoft Azure One
- North Europe (Primary) and West Europe (Secondary)
Hive
- West Europe (Primary) and North Europe (Secondary) - East US (Primary) and West US (Secondary) - Australia East (Primary) and Australia Southeast (Secondary) - Central Canada

What is the data retention for the data stored in the platform?


Customer data is deleted from the platform 90 days after contract termination.