How We Approach Security and Privacy.
Finvercel works with financial and business data, so security and privacy are part of how products are designed. This page describes our principles and how to report a vulnerability.
What we design for.
Encryption in transit
Public pages and services are delivered over HTTPS.
Least-privilege access
Access to systems and data is limited to the people and services that need it.
Credential hygiene
API keys and secrets are kept out of source code and client-side bundles, and rotated when exposure is suspected.
Data minimisation
We aim to collect and synchronise only the data needed for a clear purpose.
Traceability
Integrations and automations are designed to record what happened, so issues can be investigated.
Maintenance
Dependencies and third-party integrations are reviewed and updated as they change.
If your organisation needs specific security documentation or compliance information before using Finvercel, contact us and we will tell you what is currently available.
Your data, handled with care.
We use personal data to provide and improve our services and to communicate with you. Read the Privacy Policy for details on what we collect and your rights.
Found a vulnerability?
Please email [email protected] with “Security report” in the subject and steps to reproduce. Please do not disclose the issue publicly until we have had a chance to investigate and fix it.
- • Do not access or modify other users’ data
- • Avoid service disruption and social engineering
- • Give us reasonable time to respond before disclosure