Trust Center

Start your security review

View & download sensitive information

Search items

Overview

Welcome to Zafin’s Trust Center. Trust is at the core of everything we deliver to the world’s leading banks—from how we design our cloud-native platform to how we manage risk, safeguard systems, and operate with integrity. Our global programs are built to meet the highest standards of security, resilience, and compliance, ensuring our clients can rely on us in even the most demanding regulatory environments. This Trust Center highlights our commitment to transparency, operational excellence, and the controls we’ve embedded across our people, processes, and technology to keep your data and business secure.

Zafin Security Program is led by seasoned leaders with decades of experience. Sanjay Sharma, Chief Information Security Officer Helene Ammar, Vice President Enterprise Risk & Privacy Management

Compliance

ISO 27001:2022

SOC 1

SOC 2

Documents

DATA SECURITYThreats Protection Policy

ASSET MANAGEMENTAsset Management Process

CONTINUOUS MONITORINGCompliance and Audit Policy

CONTINUOUS MONITORINGEvent & Audit Log Management

POLICIESData Classification Policy

POLICIESAccess Control Policy

POLICIESInformation Security Policy

POLICIESBackup Policy

POLICIESCryptography Management Process

POLICIESInformation Systems Acceptable Use Policy

POLICIESAcceptable Use Policy

POLICIESSystem and Services Acquisition Policy

Access Control

Access Log Management

Privilege Escalation Process

User Access Review

AI

AI Monitoring

AI Security

AI Third Party Contracts and Diligence

Application Security

Code Analysis

Secure Development Training

Web Application Firewall

Asset Management

Asset Inventories (Hardware/Software)

Asset Management Process

Secure Asset Disposal

BC/DR

Business Continuity Plan (BCP)

Data Backup/Backup Protection

DR/BCP Testing/Lessons Learned

Change Management

Change Management Program

Change Restrictions

Changes Notification & Verification

Continuous Monitoring

Compliance and Audit Policy

Event & Audit Log Management

Security Information & Event Management (SIEM)

Data Security

Data Backups

Encryption-at-rest

Encryption-in-transit

Endpoint Security

Endpoint Detection & Response

Hardening Policy

Mobile Device Management

Incident Response

Incident Response Retainer

Security Incident Response

Security Operations Center (SOC)

Infrastructure

Anti-DDoS

Azure

Infrastructure Security

Network Security

Distributed Denial of Service Protection (Anti-DDoS)

Security Information and Event Management

Web Application Firewall

Penetration Testing

Application Penetration Testing

External Penetration Testing

Penetration Test Process

Policies

Acceptable Use Policy

Access Control Policy

Backup Policy

Training

Phishing Training

Secure Development Training

Security Awareness Training

Knowledge Base (FAQ)

How are encryption keys managed?

How does Zafin detect and prevent data loss?

Does Zafin have a formal vendor risk management process?

Does Zafin disclose subcontractor use?

Are employees required to complete security training?

Trust Center Updates

Zafin Announcement on Trust Center

Copy link

General

April 10, 2025

Zafin is proud to announce the launch of its Trust Center—a centralized platform designed to showcase our unwavering commitment to security, privacy, compliance, and transparency, empowering clients and partners with clear, real-time access to our trust and assurance posture.

If you need help using this Trust Center, please contact us.

Contact Support