Security & fraud policy

Security Commitment

Firmancy ® implements high-level technical & organizational security measures to protect your personal & financial data against unauthorized access, loss or disclosure.

Technical measures

All data exchanged between your browser & our servers is encrypted via the TLS (Transport Layer Security) protocol. Our servers are hosted in ISO 27001 certified data centers.

Access to our internal systems is protected by multi-factor authentication (MFA) & is subject to regular audit.

Passwords & sensitive data are stored in encrypted form. No employee of Firmancy ® has access to your clear passwords.

Fraud prevention

Firmancy ® has a real-time fraud detection system analyzing suspicious behavior, record inconsistencies & identity theft attempts.

In the event of suspicion of fraud concerning your account or your file, Firmancy ® takes immediate precautionary measures & informs you as soon as possible.

Incident reporting

If you notice suspicious activity on your file or think you are the victim of attempted fraud, contact Firmancy ® immediately at contact@firmancy.com.

In the event of a data breach concerning you, Firmancy ® is required to inform you within 72 hours of discovering the incident, in accordance with the GDPR.

Vigilance advice

• Firmancy ® will never ask you for your passwords, PIN codes or full banking information by email or telephone.
• Be wary of any email claiming to be from Firmancy ® & asking you to click a link to confirm your information. Always check that the sender's email address matches the official domain.
• If you have any doubts about the authenticity of a message, contact us directly via the official form available on www.firmancy.com.

Continuity plan

Firmancy ® has a Business Continuity Plan (PCA) & a Business Resumption Plan (PRA) to ensure the availability of services in the event of a major incident.