How Finsensa approaches workspace isolation, export controls, access management, and operational security for adviser-led business lending workflows.
Access controls keep each firm's case data within its own workspace.
All traffic between your browser and Finsensa is encrypted with HTTPS (TLS 1.2 or higher). Stored case data, uploads and generated outputs are held in access-controlled storage.
Access to Finsensa is controlled through authenticated sessions and application-level permission checks. Internal access to production systems is restricted on a least-privilege basis and operational access is expected to be logged and reviewed where appropriate.
Exports are logged to support traceability and audit.
Finsensa works from uploaded bank statements and other supporting case documents. Open Banking is not currently available in the product.
Retention and deletion are handled in line with Finsensa's operational retention policy, contractual terms, and backup processes. For current retention expectations, refer to the Privacy Policy, which sets out the present categories and typical retention periods.
If a security incident affects personal data, Finsensa will investigate, contain the issue, assess the legal and operational impact, and make any required notifications in line with applicable law, contractual obligations, and regulatory requirements.
If you discover a security vulnerability in Finsensa, please report it responsibly to security@finsensa.com. We aim to acknowledge credible reports promptly and handle good-faith disclosures through a responsible review process.
For security questions or concerns: security@finsensa.com