Trust & Security
Certified, encrypted, auditable.
Finkraft is ISO 27001, 27017 and 27018 certified and GDPR-aligned. Security is part of the core, so your risk team can sign off without a workaround.




Controls
Four statements you can put in front of an auditor.
Encryption in transit and at rest
TLS 1.2+ on every connection; data at rest encrypted with keys managed per region.
Role-based access across entities
Roles are scoped by entity, property or project. Approvers see what they approve, nothing more.
Full audit trail
Every capture, match, approval, payment and recovery file is logged with who, when and what changed.
Data residency
UAE customers are hosted in the UAE, Indian customers in India. The residency statement is available on request.
Security and governance
Every action is logged and traceable. Role-based access, audit trails and data residency controls are part of the core, so your risk team can sign off without a workaround.
ISO 27001ISO 27017ISO 27018GDPRRole-based accessFull audit trailData residency · UAE & India
