Snapshot 127333
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Belvo MCPs Connect your AI agents to open finance and build faster Enterprise-grade security, built for scale Trust, safety, and security are core values at Belvo because we understand the critical nature of financial data and payments. We've built these values into our security program to protect the entire lifecycle of data and transactions, ensuring our platform provides the reliability needed for your most mission-critical operations. Visit our trust center Enterprise-grade security and compliance standards Manage your data on your terms Control data retention with granular security parameters Granular data retention Full control over how long data is retained in the Belvo platform. Data is cryptographically deleted. End-to-end encryption At rest data is always encrypted with AES 256 and RSA 2048. In transit we enforce TLS1.2 and support TLS1.3. Secure platform hosting Our platform is hosted by AWS. Configured for high availability and with security best practices to ensure uninterrupted services for you. Our commitment to a secure platform Proven through industry-standard certifications and practices Security team Our dedicated security team focuses on the security of our products, our company and the data of our customers. Third-party validation Third-party penetration tests and audits are regularly conducted against our platform, workforce, and policies. We also run a public bug bounty program that rewards independent researchers for responsibly reporting vulnerabilities. Incident response We maintain a proactive incident response posture through regular, simulated exercises, ensuring rapid remediation and on time customer communication. Engineering software for resilience Our platform is built to withstand evolving threats SSDLC By embedding security practices throughout the entire development process, we build defenses before problems arise, providing you with secure software. Security testing We use state of the art security testing to proactively identify and eliminate vulnerabilities in our codebase and to continuously monitor and manage the security of our software supply chain. Security solutions Our cutting-edge web application firewall is an intelligent gatekeeper. It inspects all incoming traffic and ensures adherence to our API standards. Only authorized and safe traffic interacts with your data. A payment ecosystem you can trust We ensure the reliability and confidence of your transactions PCI DSS compliance We are a Level 1 PCI DSS provider, providing top-tier security across all of our payment solutions. Cutting-edge technology We are committed to security technology. One example is our state-of-the-art biometric payment solution for secure payments in Brazil. 24/7 on-call personnel Our robust monitoring systems operate around the clock, in the event of a disruption, our on-call engineers are immediately alerted to restore services. Investing in our human firewall We empower every employee as a vigilant line of defense Security trainings Mandatory, documented, and tailored security training and workshops are integral to our security culture, promoting organization-wide awareness and responsibility. Company-provided hardware All company-provided hardware adheres to rigorous industry best practice security standards, including endpoint protection, malware defenses, a zero-trust security model, and regular patching. Phishing resilience Recognizing phishing as a primary risk, we conduct regular phishing imulations to identify vulnerabilities, provide targeted training and improve our organization’s resilience. Certifications and standards Enterprise-grade security and compliance standards Belvo uses state-of-the-art protocols and follows regulatory best practices to protect the account information and privacy of our customers. ISO 27001 ISO 27001: 2022 Belvo was the first open finance API platform in Latin America to obtain the ISO/IEC 27001:2022 certification. ISO 27001 covers all of our company’s operations, including all product lines, processes, human resources security, data management, communications, and supply chain management. Access our trust center PCI DSS PCI DSS LEVEL 1 Belvo is also a PCI DSS compliant Service Provider. PCI DSS compliance ensures that payment transactions and associated data are handled with the utmost care and protection. Access our trust center Questions about security? If you have any additional questions about security at Belvo, please contact security@belvo.com. Found a vulnerability? We run a public bug bounty program on Bugbop. To review the scope and rules and submit a report, click here. Let's build the future of finance together Contact sales GDPR Cookie Banner This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Cookie Policy.