We build Fintower so the financial data you trust us with is handled with the same care that banks and auditors require. Here is how we work and what it means for you.
Certifications and guarantees
AI Protection
Active
Your financial data is never used to train AI models, ours or any provider's.
We explicitly prohibit training on customer data.
AI features use Anthropic models via Amazon Bedrock in the AWS EU region. The provider does not store the data or train on it.
Chat history is saved in your account so you can continue earlier conversations.
GDPR Compliant
Active
Customer data is stored in the EU and personal data is processed under the GDPR. A Data Processing Agreement (DPA) is included.
Customer data is stored on EU-based infrastructure (Ireland). Google sign-in and some website tools may involve transfers to the US under the EU-U.S. Data Privacy Framework (DPF) or Standard Contractual Clauses (SCCs).
Data Processing Agreement (DPA) included automatically with every plan.
Records of processing activities are published.
Right to erasure, data portability, and access, always available directly in the product or via support.
ISO/IEC 27001
Certification in progress
We run our information security management system according to ISO/IEC 27001, and certification is in progress.
Independent penetration test by Borg Security in August 2026. All findings remediated.
Procedures for access control, change management and incident response.
Quarterly internal security reviews and an annual risk assessment.
Built in, across every plan
Encryption
AES-256 at rest, TLS 1.2 or later in transit.
Role-based access
Granular permissions with SSO support.
Logging
Access and security logs are kept for 90 days.
Backups
Encrypted automated backups.
MFA through your identity provider
Sign-in with Microsoft Entra ID or Google, so your organization's MFA and policies apply.
Incident process
Defined response plan with a 24h SLA for critical incidents.
Security questions?
Reach our security team
For security disclosures, DPA requests, or questions about our infrastructure, contact us at info@fintower.se.
