Security - TransFICC

Enterprise Security for Capital Markets

A defence-in-depth approach to security: SOC 2 Type II attested, GDPR compliant. Firewalls, IDS, encryption, multi-factor authentication, and 24/7 security monitoring for trading infrastructure.

SOC 2 Type II attestation
GDPR compliant
DORA compliant
NIS2 complaint
AI Act compliant
Firewalls, IDS/IPS, encryption
Security monitoring platform with real-time alerts
Dedicated security staff with 20+ years of capital markets experience

Core Security Capabilities

Network and Host Based Security
Security Enhanced Linux (SELinux), firewall, role-based authentication, and least privileged access model.

Threat and Vulnerability Management
Continuous vulnerability scanning, threat intelligence integration, proactive weakness identification, and Capital Markets-focused threat monitoring.

Identity and Access Management
Least privilege enforcement, seamless global integration, regular access reviews, multi-factor authentication (MFA), and role-based access control (RBAC).

Enterprise Security Monitoring
Global SIEM platform, real-time event processing and alerting, IDS and advanced threat intelligence.

Audit and Compliance
SOC 2 Type II compliance support, GDPR assistance, regular audits and reporting, and regulatory transparency.

Defence-in-Depth

Perimeter Defences

Enterprise-grade firewalls and ACLs
Secure web gateway and sandboxing for threat analysis
DDoS protection and rate limiting
Perimeter security monitoring with real-time alerting
Cloudflare SASE and Zero Trust

Network Security

Network segregation and segmentation isolating environments
IDS deployed throughout infrastructure
Encrypted connectivity: VPN, TLS 1.2+, AES-256
VLANs and microsegmentation limiting lateral movement

Host-Based Controls

Host-based firewalls
Endpoint Detection and Response (EDR) for threat hunting
Managed Detection and Response (MDR)
SELinux mandatory access controls
Role-based authentication and least privileged access

Data Protection

Encryption at rest (AES-256) and in transit (TLS 1.2+)
Data Loss Prevention (DLP) monitoring
Hardware security modules (HSM) for key management
Secure data destruction following NIST 800-88

Compliance Framework and Certifications

SOC 2 Type II
Independent third-party attestation covering security, availability, processing integrity, confidentiality, and privacy. Annual audits and reporting.

GDPR Compliance
EU data protection regulation compliance with data subject rights management and privacy.

DORA Compliance
EU regulation designed to strengthen the digital resilience of financial firms and FinTechs.

NIS2 Compliance
EU cybersecurity regulation protecting network and information systems, users and other affected individuals.

AI Act Compliance
EU risk-based rules for AI developers and deployers regarding specific uses of AI.

Industry Standards
Following ISO best practices. Compliance with financial services regulations and regular assessments.

Vanta Trust Centre
Using Vanta Trust Centre we provide the highest levels of security compliance, manage IT risks, and prove our security to customers, streamlining audits and vendor reviews with continuous monitoring and automated evidence collection. Trust Centre centralises critical information about compliance, security, privacy, and more. Our customers can review everything in one place.