Security & privacy at Fininly.
Fininly’s security-driven approach ensures the strongest privacy and security standards, with optimised controls and processes across everything we do.
EU General Data Protection Regulation
Fininly is GDPR compliant as protection of personal data is a top priority.
EU Data Privacy Framework (DPF) Registration
End of 2024, Fininly will be certified services under the Data Privacy Framework (DPF) Program.
ISO 27001 Information security management
Fininly aims to get ISO certified in the 4th quarter of 2024 and to exceed the international standards for our information security management system .
Digital Operational Resilience Act (DORA)
As of January 17, 2025, Fininly's software enables our customers to comply with the Digital Operational Resilience Act.
"We are committed to continually raising Fininly's security posture by complying with the highest security standards. We do this to strengthen the resilience of the organisation and our solution against an evolving landscape."
Arthur van Cadsand
Chief Executive Officer
Security-first and privacy in every detail
Fininly is powered by enterprise-grade security. We're trusted by our customers to meet and exceed industry standards and deliver security across every part of our platform.
Backup
Data is backed up continuously on Microsoft Azure. These backups are encrypted and data retention rules apply.
Application security
Penetration tests and continuous scanning for vulnerabilities on our code following the SDL methodology.
Disaster recovery
Fininly is deployed in Microsoft Azure data centers. Disaster recovery testing is carried out regularly.
ID & access management
Accessed through SSO or email authentication. Fininly implements role-based access control and access to the platform is logged.
Data security
Data encrypted both at rest and in transit, and stored in Microsoft Azure data centers in either Europe, the USA, Australia or Canada.
Incident management
Incident Management Policy with defined processes, roles, communications, responsibilities and procedures for detection and escalation.
Physical security
Microsoft Azure is responsible for the physical security of their data center sites, while physical controls are implemented.
Organisational security
Fininly has a specific Information Security department. Employees are trained and pre-employment checks are carried out.
Privacy
Fininly maintains policies, standards and procedures for privacy. Please see our privacy FAQ page for more details.