Trust Center

Overview

Welcome to Finix's Trust Center

Security and compliance are fundamental to everything we do at Finix. As a financial technology company, we understand that your trust is earned through transparency and demonstrated commitment to protecting your data.

This Trust Center provides comprehensive information about our security posture, compliance certifications, and data protection practices. Whether you're evaluating Finix as a partner or maintaining oversight of our relationship, you'll find the documentation and evidence you need to make informed decisions. Request access to detailed security documentation or reach out to our team with specific questions about our security program.

Compliance

• PCI DSS
• SOC 1
• SOC 2

Documents

• REPORTSPCI DSS
• REPORTSSOC 1 Report
• REPORTSSOC 2 Report

Trust Center Updates

Finix Vulnerability Disclosure Program

General

September 30, 2025

We welcome security researchers to help us maintain a secure platform. If you've discovered a potential security vulnerability, please report it responsibly.

Submit Report

Please provide detailed information including reproduction steps and impact. We take all reports seriously and will work with you throughout the process.

Review our full disclosure policy for complete guidelines.

Knowledge Base (FAQ)

• Learn how Finix handles PCI DSS compliance.
• Is Finix a PCI Level 1 Payment Provider?
• Is sensitive data encrypted?
• What is tokenization?
• How does Finix manage secure connections?

Security Grades

• BitSight Finix Payments, Inc. 770
• Qualys SSL Labs Finix.com A Finix Dashboard A

Product Security

• Audit Logging
• Data Security
• Integrations

Reports

• PCI DSS
• SOC 1 Report
• SOC 2 Report

Data Security

• Access Monitoring
• Data Asset Classification
• Data Backups

App Security

• Responsible Disclosure
• Application Penetration Testing
• Bot Detection

Data Privacy

• Data Breach Notifications
• Data Privacy Officer
• Employee Privacy Training

Risk Management

• Risk Assessments
• Supply Chain Risk Management

Asset Management

• Asset Classification
• Asset Inventories (Hardware/Software)
• Asset Tracking

BC/DR

• Business Continuity Plan (BCP)
• Contingency Plan Testing/Lessons Learned

Change Management

• Change Advisory Board (CAB)
• Change Management Program

Incident Response

• Designated Response Personnel
• Incident Reporting Process

Training

• Employee Privacy Training
• Phishing Training

If you need help using this Trust Center, please contact us.

Contact support

If you think you may have discovered a vulnerability, please send us a note.

Report issue