Your security is ourshared responsibility.

Use Strong Authentication

• Choose a password with at least 12 characters, including letters, numbers, and symbols.
• 2-Factor Authentication (2FA) is enabled by default.

Stay Alert to Phishing & Social Engineering

• FinBursa will never ask for your password or private details via email or phone.
• Be cautious of unsolicited emails or messages pretending to be from FinBursa.

Keep Your Login Credentials Private

• Never share your FinBursa password or email password with anyone.
• If you experience login issues, reach out to our team through contact@finbursa.com

Verify You're on the Official FinBursa Website

• Always check that you are visiting https://www.finbursa.com
• Our website is secured with SSL/TLS encryption to protect your data from interception.

Watch Out for Fake Emails (Email Spoofing)

• Always verify that emails from FinBursa come from an @finbursa.com or @email.finbursa.com domain.
• Be cautious with emails that request sensitive information or contain urgent security warnings.

SOC 2 Type I Completed

FinBursa has completed its SOC 2 Type I examination, assessing the design of controls relevant to security. SOC 2 Type II is planned as the next stage of our assurance program.

GDPR-Aligned Data Protection Controls

Lawful-basis processes, Data Processing Agreements, Standard Contractual Clauses, and data-subject request workflows are maintained as part of FinBursa's data protection framework.

DDoS Protection & Web Application Security

Leading firewall and anti-DDoS systems help protect the platform against network and application-layer threats.

Regular Security Testing

Internal and third-party penetration tests are conducted regularly to identify and address potential vulnerabilities.

Vulnerability Management

Vulnerabilities are prioritized based on severity to ensure critical issues are addressed promptly and systematically.

Data Encryption

Data at rest is encrypted using AES-256. Data in transit is protected with TLS v1.2+.

Privacy Policy

FinBursa maintains a dedicated Privacy Policy governing how personal data is collected, used, and handled.

Employee Device Security

Industry-leading endpoint protection and anti-malware solutions are deployed across employee devices.

Access Controls

Single Sign-On (SSO), Multi-Factor Authentication (MFA), and least-privilege access principles govern access to internal systems.

Continuous Monitoring

Security Information & Event Management (SIEM) provides continuous visibility into platform activity and potential threats.

Backup & Disaster Recovery

Continuous backups are maintained across multiple secure locations to support data resilience and rapid recovery.

FinBursa believes effective disclosure of security vulnerabilities requires mutual trust, respect, and transparency between FinBursa and the security community.

FinBursa accepts vulnerability reports from independent security researchers, industry partners, vendors, customers, and consultants.

This policy applies to digital assets owned, operated, or maintained by FinBursa, including our public-facing websites.