FINBOURNE maintains appropriate technical and organizational security measures to safeguard personal data against unauthorized or unlawful processing, accidental loss, disclosure, destruction, or damage. They employ Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA) for system access. Firewalls are configured according to industry best practices and regularly checked. All data is encrypted at rest and in transit using industry-standard protocols. They conduct regular external security audits and maintain incident management policies. FINBOURNE will not keep personal data longer than reasonably necessary to fulfill the purposes described in their Privacy Policy or as needed to meet legal and governance obligations. Upon termination or expiry of an agreement, they will securely return, delete, or destroy all customer data, except for any personal data required to be stored by Data Protection Laws.

SOC2 II compliant. See for further information here and here.