Fintalk

We are obsessed with security

Talk to our team

PCI Ready

ISO 27001

LGPD

External pentest

You are safe with us

Isolation

Dedicated database and storage, in separate cloud accounts.

  • Dedicated environment per operation
  • Segregated cloud accounts

Encryption

Encrypted traffic and storage, with keys kept in a separate vault.

  • TLS in transit
  • Encryption at rest
  • Dedicated key management
  • Secrets in a vault, outside the code

Access

Two-factor login and permissions per role and per operation.

  • SSO
  • MFA
  • RBAC
  • Row Level Security

Network

Closed network, no public address, with attack filtering at the edge.

  • Private VPC
  • Egress through bridge
  • WAF and volumetric mitigation

Traceability

Every message, query and access logged with date, time and author.

  • Event trail
  • API logs
  • Access logs

Privacy

Names, IDs and contact data masked in the analytics base.

  • Masking and anonymization in the data lake
  • LGPD