Controls your risk committee can sign off
Sentrix is built for institutions under supervision — banks, acquirers, PSPs and EMIs. This is the single place to review our security posture, compliance alignment, legal terms and live status.
Control summary
Encryption
TLS 1.2+ in transit, AES-256 at rest for data and backups.
Access
RBAC and least privilege today; SSO/SAML for Institution plans is on our roadmap.
Audit
Append-only decision and override log to support examiner evidence.
Isolation
Logical per-workspace tenant separation.
Governance
Role separation and RBAC-gated overrides; four-eyes approval on high-impact overrides is on our roadmap.
Vendors
Screening providers behind reviewed, sandboxed adapters.
Documentation & policies
Enterprise & procurement →
Security review, DPA & documentation package, deployment model, service levels and onboarding for buyers.
Information Security →
Technical & organisational measures, encryption, access, isolation and vulnerability disclosure.
Regulatory & Compliance →
Frameworks we align to, UAE PDPL & AML posture, data residency and obligation mapping.
AML & CTF Policy →
Our financial-crime programme (UAE Decree-Law 20/2018, FATF) and how the platform enables customer obligations.
Data Processing Addendum →
Controller/processor terms, security annex and sub-processing.
Sub-processors →
Named infrastructure sub-processors, purpose, region and change notifications.
Privacy Policy →
What we process, lawful bases, transfers, retention and your rights under the UAE PDPL.
Responsible Disclosure →
How to report a vulnerability safely, and our safe-harbour commitment.
Legal & Trust hub →
Every agreement, policy and assurance document in one place.
System status →
Live operational status and programmatic health endpoint.
Support →
FAQ and how to reach security, privacy and complaints.
Certifications
Our control framework is aligned to SOC 2 and ISO 27001 practices. In this evaluation environment, formal third-party attestations are represented as in-progress and on our roadmap; the underlying controls themselves are implemented. We are happy to walk security and risk teams through the details.
Security contact: security@sentrix.world · System status → · Compliance →