Legal

Data Protection

FinSmart is committed to safeguarding business and personal data.

Our Commitments

  • Data used only for service delivery
  • No selling of business data
  • Secure cloud infrastructure
  • Restricted staff access
  • Activity logging and monitoring
  • Backup and disaster recovery systems

Data Protection Measures

  • Encryption in transit (HTTPS) between your browser, FinSmart and FBR
  • Two-factor authentication (authenticator app with recovery codes) and hashed passwords
  • FBR tokens stored per business and used only on the server
  • Activity log of changes and server-side audit log of every FBR request and response
  • Role-based access control
  • Firewall protection and security monitoring

Breach Response

In the unlikely event of a data breach, we will:

  1. Investigate immediately
  2. Secure systems
  3. Notify affected users where legally required