Security, Quality, and Integrity are Core to Our Culture and Services

Companies feel safe partnering with Finexio, because of our security-first mindset when handling their money. Finexio's Payments as a Service model provides fast, safe, and bank-level secure B2B payments.

a few people sitting at a table

End-to-End Security Framework

Organizational Security

Finexio believes that instilling good security practices at the onset is important, so Finexio provides training and context necessary to all employees to defend against phishing and other cyber attacks. Finexio has SOC 2 Type 1 & 2 Certifications which confirms the proper management, availability, security, and integrity of Finexio’s data processing systems.

Platform Security

The Finexio platform has been designed from the ground up with data security in mind. Data is only accessible to intended parties, encrypted while in transit, encrypted at rest and highly available at all times. Security roles have been defined to limit access to data and restrict access to only necessary functions.

Network & Database Security

Finexio’s physical infrastructure is hosted and managed within Amazon Web Service (AWS) technology. Best-in-class framework design along with security best practices, provides Finexio customers and partners that payments are secure and moving.

Payment Method Security

Finexio is committed to keeping your payments secure by having built-in fraud protection protocols in place. The Finexio Portal also provides full visibility to track down and understand the path of a payment for auditing purposes. Finexio promotes Virtual Card payment methods, as this is the most secure form of payment for our customers and partners.

user interface

Payment Data Storage
& Security Protocols

Finexio is committed to keeping your payments secure with bank-level security procedures.

Collected - Finexio reduces human error by taking on collecting sensitive supplier banking information.

Validated - Finexio completes bank account validation, performs Know Your Customer (KYC), conducts OFAC sanctions screening, and AML compliance transaction monitoring to prevent fraud and reduce risk.

Encrypted - Finexio ensures that sensitive supplier banking data is protected and stored safely.

Stored - Finexio hosts, manages, and has database security backups within Amazon Web Services (AWS), and has security measures in place, such as platform security, email security, and database security.

a woman working on her laptop

Data Cleaning & Enrichment

Precise payment data for making fast and accurate payments

Payment data is always up-to-date and robust for reporting

Better supplier information to increase payment conversion

Finexio Supplier Verification

Finexio follows documented policies and procedures for supplier verification to keep our customers and partners secure.

Finexio verifies bank account changes against industry-leading tools to mitigate fraud risk

Finexio screens suppliers against OFAC and other high-risk lists to ensure compliance with regulatory requirements

Transaction monitoring capabilities provide immediate notification of high-risk payments

Preventing Payment Fraud and Ensuring Security Can Be Simple

Rest easy with the knowledge that Finexio is on your side, equipped with technology and staff for fraud prevention, detection, and recovery to protect your payments.

Security FAQs

Network Security

Careful planning and well-designed controls and policies need to be in place to safeguard that information flow and protect the systems from malicious data or actors.  Endpoints not only need to be secured but the data needs to be sufficiently encrypted to protect it while in transit and at rest.  Prevention is the first line of defense while detection and response are essential to minimize any breaches of defense. Finexio has implemented these frameworks and policies to achieve the highest level of network security and monitoring: 

Firewalls

Firewalls are utilized to restrict access to systems from external networks and between systems internally. By default, all access is denied, and only explicitly allowed ports and protocols are allowed based on business needs.  Each system is assigned to a firewall security group based on the system’s function. Security groups restrict access to only the ports and protocols required for a system’s specific function to mitigate risk.

  • Required encrypted HTTPS communication from clients to platform using:
  • Military Grade Encryption: RSA 2048 bits keys - Supports TLS 1.2 or 1.3 - SHA-256 - HTTP Strict Transport Security (HSTS)
  • Routine monitoring of firewall and IDS logs and configurations
  • Routine review of user access to the production environment
  • Regular Vulnerability Scanning - provides comprehensive and accurate results to proactively identify and remediate potential areas of attack and reduce risk
  • Incident Response - for security event logging, orchestration, and response along with Intrusion Detection and Prevention

Our infrastructure guards us against common exploits done by common attacks, such as DDoS, Spoofing and Sniffing, and Port Scanning. Finexio utilizes application isolation, operating system hardening restrictions, and encrypted connections to further ensure risk is mitigated at all levels.

Data Centers

Data Centers 

Amazon has many years of experience in designing, constructing, and operating large-scale data centers. This experience has been applied to the AWS platform and infrastructure. 

Finexio’s physical infrastructure is hosted and managed within Amazon’s secure data centers and utilize the Amazon Web Service (AWS) technology. Amazon continually manages risk and undergoes recurring assessments to ensure compliance with industry standards. Amazon’s data center operations have been accredited under:

  • ISO 27001
  • SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)
  • FISMA Moderate
  • Sarbanes-Oxley (SOX)
Vendor Management

Finexio has a stringent vendor management policy. We perform a comprehensive security review of all vendors to ensure that they adhere to best-in-class security practices. Finexio ensures that client data is going to be handled securely with our trusted partners. 

Network Operations Center (NOC)

24/7 monitoring of IT networks and infrastructure to ensure that the platform is running so payments can flow seamlessly.

Security Operations Center (SOC)

24/7 monitoring so that Finexio is able to react swiftly and appropriately when responding to cybersecurity incidents.