Security Policy 

FintechIQ is committed to protecting the confidentiality, integrity, and availability of information entrusted to the organization. Information security is essential to maintaining customer confidence, delivering reliable financial technology services, meeting contractual obligations, and supporting sustainable business operations.

​

This policy applies to all employees, management, contractors, temporary personnel, and third parties who access FintechIQ information or information systems. It covers information in electronic, physical, and verbal form, whether processed on company premises, remotely, or through approved cloud and external service providers.

​

FintechIQ adopts a risk-based approach to information security aligned with the principles of ISO/IEC 27001. Information assets are identified, classified, and protected according to their sensitivity and business value. Security risks are assessed regularly, assigned to accountable owners, and addressed through proportionate technical and organizational controls.

​

Access to systems and data is granted on the principles of least privilege and need to know. Authentication controls, including multifactor authentication where appropriate, are implemented to reduce unauthorized access. Sensitive information is protected through encryption, secure transmission, controlled retention, and appropriate disposal. Systems are maintained through secure configuration, timely updates, vulnerability management, backups, and monitoring.

​

All personnel must protect company and customer information, comply with applicable procedures, use approved technologies, and promptly report suspected security incidents, phishing attempts, data loss, or other unusual activity. FintechIQ provides relevant information security awareness and training to promote responsible behavior across the organization.

​

Security requirements are incorporated into supplier selection, contractual arrangements, system development, and changes to business processes. Third-party services are evaluated according to the risks they introduce, with appropriate oversight of access, data handling, and service continuity.

FintechIQ maintains incident management and business continuity arrangements to ensure that security events are detected, assessed, contained, investigated, and addressed without unnecessary delay. Backup recovery capabilities and continuity procedures are reviewed and tested according to business requirements.

​

The organization is committed to complying with applicable legal, regulatory, privacy, and contractual information security obligations. Management provides the resources, responsibilities, and oversight required to implement this policy and pursue measurable information security objectives.

Compliance with this policy is monitored through reviews, internal audits, risk assessments, and corrective actions. Violations may result in appropriate disciplinary or contractual measures. This policy is communicated to relevant interested parties, reviewed at least annually and whenever significant changes occur, and approved by FintechIQ management to ensure its continuing suitability and effectiveness.

​

Every individual is expected to support continuous improvement and safeguard information throughout its lifecycle