Security

Backfin Security

How Backfin approaches security for AML/KYT operations. Contact [email protected] for a detailed security pack.

Hosting region

Backfin is operated by BackFin AI s.r.o. (Czech Republic, EU). Production hosting uses EU-based infrastructure providers; exact regions are shared during vendor due diligence.

Data access controls

Role-based access limits who can view cases, rules, and customer data. Administrative access is restricted to authorized personnel.

Audit trail

Case actions, decisions, and workflow steps are logged to support internal control and regulatory review.

Encryption

Data in transit is protected with TLS. Data at rest is encrypted using industry-standard mechanisms provided by the hosting platform.

Backups

Production data is backed up on a regular schedule with retention appropriate for business continuity. Recovery procedures are tested periodically.

Incident contact

Report security concerns to [email protected] with subject line "Security".

Subprocessors

Backfin may use subprocessors for hosting, e-mail, and operational tooling. A current list is available on request during procurement.