Data
Encryption & residency
AES-256 at rest, TLS 1.2+ in transit, India-hosted by default with customer-managed key options.
Assurance
Security & Compliance
Unbeatable security is a promise we make on the homepage. This is what stands behind it.
Access
Identity & access
SSO (SAML/OIDC), MFA, role-based access, least privilege and full session logging.
Assurance
Certifications
ISO 27001 aligned controls; SOC 2 Type II programme; annual VAPT by CERT-In empanelled auditors. [Confirm current status]
Regulatory
RBI alignment
Built for regulated lenders: outsourcing guidelines, data localisation, audit trails and regulatory reporting.
Resilience
Availability
Multi-AZ deployment, RPO 15 min / RTO 1 hr targets, tested DR runbooks.
Practice
Secure development
Threat modelling, dependency scanning, code review and staged releases.
Responsible disclosure
If you believe you have found a vulnerability in a GTFHUB system, email security@gtfhub.com. We acknowledge within 2 business days and do not pursue good-faith researchers.
Sub-processors
A current list of infrastructure and service providers is available on request under NDA.
Placeholder: replace with the certification status, audit dates and hosting providers confirmed by the security team before publishing.
Need the full security pack?
Policies, pen-test summaries and architecture diagrams under NDA.
Request security packOur Ethos
All Things Finance –
Tech Enabled
InnovationCollaborationSecurity
High value transactions deserve a conversation. Tell us what you are trying to do and we will route you to the right desk.