Manage financial and customer data with the highest level of security and privacy, for both you and your customers.
We comply with all international standards for information security, including ISO.
Our systems are fully compliant with General Data Protection Regulation (GDPR) guidelines.
Our digital bank infrastructure can be deployed independently for a customer for greater control.
We default MFA for access to any account, admin, hosting, user web and mobile apps.
XFIN uses system monitors with instant alerts and 24/7 manual monitoring, through the year.
We use Cloudflare for CDN asset caching, API rate limit controls, and DDoS risk management.
Our application and database is hosted on Amazon Web Services, the most secure cloud host in the world.
All data, files and backup resources are encrypted with additional field-level encryption.
We comply with all VPN-access requirements and standards, with access to admin portal highly sensitised.
In addition to internal security tests, external penetration tests from security agencies are done, multiple times a year.
We built security right into the code from architecture design, engineering, QA, deployment, monitoring, alerting and incident management.
App users need to enable biometrics such as face or touch ID in addition to PIN/Password/OTP for logging in.
Facial recognition, OCR and AI solutions to verify the identity of users who attempt to open a new account.
Multi-factor authentication for money transfers, bill payments and foreign remittances.
Data transmission is protected by a combination of security mechanisms like TLS1.2, 128Bit encryption, SSL and IP whitelisting of data stores.
All data is encrypted using a secret, ultra-secure key. The encrypted data and secret key, arrive securely for decryption with the recipient.
Bank grade security at infra, user and data level to give your digital banking the protection it deserves.