Controls your risk committee can sign off
Sentrix is built for institutions under supervision, banks, acquirers, PSPs and EMIs. This is the single place to review our security posture, compliance alignment, legal terms and live status.
Control summary
Encryption
TLS 1.2+ in transit, AES-256 at rest for data and backups.
Access
RBAC and least privilege today; SSO/SAML for Institution plans is on our roadmap.
Audit
Append-only decision and override log to support examiner evidence.
Isolation
Logical per-workspace tenant separation.
Governance
Role separation and RBAC-gated overrides; four-eyes approval on high-impact overrides is on our roadmap.
Vendors
Screening providers behind reviewed, sandboxed adapters.
Documentation & policies
Enterprise & procurement →
Security review, DPA & documentation package, deployment model, service levels and onboarding for buyers.
Information Security →
Technical & organisational measures, encryption, access, isolation and vulnerability disclosure.
Regulatory & Compliance →
Frameworks we align to, data-protection & AML posture, data residency and obligation mapping.
AML & CTF Policy →
Our financial-crime programme (applicable AML/CTF law, FATF) and how the platform enables customer obligations.
Data Processing Addendum →
Controller/processor terms, security annex and sub-processing.
Sub-processors →
Named infrastructure sub-processors, purpose, region and change notifications.
Privacy Policy →
What we process, lawful bases, transfers, retention and your rights under applicable data protection law.
Responsible Disclosure →
How to report a vulnerability safely, and our safe-harbour commitment.
Legal & Trust hub →
Every agreement, policy and assurance document in one place.
System status →
Live operational status and programmatic health endpoint.
Support →
FAQ and how to reach security, privacy and complaints.
Certifications
Our control framework is aligned to SOC 2 and ISO 27001 practices. In this evaluation environment, formal third-party attestations are represented as in-progress and on our roadmap; the underlying controls themselves are implemented. We are happy to walk security and risk teams through the details.
Security contact: security@sentrix.world · System status → · Compliance →