We are Cyber Essentials certified, demonstrating our commitment to protecting your data and ensuring robust cyber security measures. This UK government-backed certification confirms that our systems guard against common cyber threats, providing confidence that we take data protection seriously and follow industry best practices for online safety and security.
We are registered with the Information Commissioner’s Office (ICO), confirming our commitment to data protection and privacy. As a responsible data controller, we comply with UK GDPR and Data Protection Act requirements, ensuring your personal information is handled lawfully, transparently, and securely in accordance with regulatory standards.
We undertake routine installations of security updates and patches that fix, remove or quarantine newly discovered security holes and bugs.
Industry-standard coding guidelines, including OWASP recommendations for all development of the software including public website and API.
We never expose sensitive financial data once captured on our end. Sensitive data gets masked or removed from transactions and logs.
We regularly carry out internal and external network penetration tests, as well as automation testing tasks and third-party code reviews that safeguard software.
Protecting your data is, therefore, our number one priority. Two-factor authentication is required for every user on an approved account. All communication is encrypted and transmitted via secure HTTPS, and application as well as user access logs, are centrally stored and closely monitored.
If you believe you’ve discovered a bug, or encountered any security-related issues, please get in touch at finexer.com We will respond as quickly as possible to your report. We request that you not publicly disclose the issue until it has been addressed by Finexer.
Your first layer of protection is your password. Two-factor authentication adds a second layer of protection - a unique verification code that changes every time you sign in. Team members enter an authentication token from their mobile device, by SMS or by an authenticator application, prior to gaining access to their account. Once an account is approved, two-factor authentication is required for every user on it, and the Dashboard cannot be used until it is enabled.
Finexer uses Advanced Encryption Standard (AES). All sensitive data is encrypted with AES-256 and stored in isolated environment.
This data store doesn't share credentials with another services and cannot be connected to via the internet.
In addition, we practice consistent key rotation.
As our software allows to add team members to your Finexer account, our access controls allow you define what they can see and do within your account. You can control access to an individual page or action. For example, customer support needs to access and manage subscription, finance needs to view financial analytics, developers need to access API, etc.
Our software runs on multiple servers. Data is replicated across all sites, ensuring that customer information is never lost. We run a remote backup of our storages on a daily basis and store it in an offsite facility for extra redundancy.
The software is hosted in a dedicated hosting environment with 24x7 security. Physical access to the network is strictly limited and monitored. Network access is highly restricted by robust firewall rules which protect communication entering the network and between private networks.
We require strong passwords for all Finexer users and to authenticate every time they log into their Dashboard. Finexer uses standard, well-reviewed cryptographic protocols. Communication between users and Finexer is conducted using Transport Layer Security (TLS), including our API, public website and the Dashboard.
HTTPS (Hypertext Transfer Protocol Secure) is an internet communication protocol that protects the integrity and confidentiality of data between the user's device and the internet site.
Finexer forces HTTPS for all services using TLS (SSL), including our APIs, public website and the Dashboard. We also use HSTS to ensure browsers interact with Finexer only over HTTPS. This will force browsers to prevent requests from being sent through insecure connection (HTTP).
