BVNK Services Ltd

BVNK Services Ltd hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

BVNK Services Ltd's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

BVNK Services Ltd publishes an ISO certificate on its trust center; you can request access through SOC2C.

Security isn't a single yes/no, but BVNK Services Ltd is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

BVNK Services Ltd hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@bvnk.com or via a /security page.

BVNK Services Ltd lists 27 subprocessors on its trust center, including Amazon Web Services, BVNK Services Limited, Google Cloud Platform, Ondato UAB, Refinitiv (LSEG - LSEG Financial Solutions). Buyers use this for fourth-party risk review.

BVNK Services Ltd hosts on AWS, GCP, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.

BVNK Services Ltd's trust center is at https://trust.bvnk.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Personal information we collect will fall within one of the below: - Personal information: Basic information about you, including your signature; - Identification data including unique descriptors: Government issued identifiers, other unique identifiers such as date of birth, and personal descriptors that might identify you; - Financial and transactional: Financial information about you, transactional information and credit information, account authentication details; - Contractual details: information collected as part of the products and services we or our service providers provide you; - Socio-demographic: Details about your work or profession, nationality, education; - Technical information: Details about your devices and technology that you use to access our services, including IP address; - Behavioural: information about how you use our products and services; - Location: Data we receive about where you are; - Communications: Information we capture through your communications with us, e.g. emails, instant messaging; - Publicly available information: Details that are in public records and information about you that is openly available on the internet.

We take all appropriate and reasonable technical and organisational measures to prevent the loss of, damage to or unauthorised destruction of personal data and the unlawful access to or processing of such data. We have systems in place to control your data in a way that minimizes its exposure. We will take reasonable steps to identify all reasonably foreseeable internal and external risks posed to your personal data under our possession or control and establish and maintain appropriate safeguards against any risks identified.

The personal information we collect from you may be transferred to, stored and processed outside of the jurisdiction in which you live. The laws of those countries may vary from the laws applicable in your own country. Data gathered in the European Economic Area (EEA) may be transferred to, stored and processed at a destination(s) outside of the EEA. Said international data transfers will be carried out in strict compliance with the Regulation and after having executed the relevant Standard Contractual Clauses with the recipients of the data. Your account is stored by BVNK on a secure server maintained and operated by third-party service providers. These third-party providers are bound by and adhere to the relevant data processing agreements, in compliance with the Regulation.

We may share your information in the manner and for the purposes described below: - Internally, where such disclosure is necessary to provide you with our services or to manage our business; - With third parties who help manage our business and deliver services, pursuant to a contract between the third party and BVNK. In these circumstances, the third party may be another controller, processor or sub-processor. Where the third party is a processor or a sub-processor, they are obliged amongst other things, to keep your details secure, and to use them only to fulfil their contractual obligations to BVNK under a processing agreement or terms which comply with Article 28 of the Regulation. - With agencies and organisations working to prevent fraud in financial services; - With our regulators; - To comply with all applicable laws, regulations and rules, and requests of law enforcement, regulatory and other governmental agencies; When they no longer need your personal data to fulfil this service, they will dispose of the details in line with BVNK’s data retention policy, or as otherwise set out in the processing agreement.

You have the right to access your personal data held by BVNK, by contacting us with a request at [dpo@bvnk.com](mailto:dpo@bvnk.com). For your protection, We will take steps to verify your identity before fulfilling your request. If there are any changes to your personal information or if you believe that the information we have about you is inaccurate, incomplete, misleading or not up-to-date, you must inform us accordingly at [dpo@bvnk.com](mailto:dpo@bvnk.com). You also have the right to request the restriction and objection to its processing, the right to request the portability of your personal data and the right not to be subject to a decision based solely on automated processing. You have the right to be forgotten in terms of the Regulation. This may be done by requesting your account to be deleted in a support ticket to the BVNK support team at [dpo@bvnk.com](mailto:dpo@bvnk.com). By requesting us to delete you, you may forfeit your ability to use BVNK’s services going forward as We require certain data in order to provide our services. We may use our discretion in allowing correction requests and may request further documentary evidence of any new information in order to avoid fraud and inaccuracy. You can also file a complaint before the Spanish supervisory authority (the, “AEPD”) at www.aepd.es/es.

Yes, in some cases, customer data may be transferred to and processed in countries outside of your region. When this occurs, we ensure that appropriate safeguards are in place, such as standard contractual clauses, to protect the data.

Our company complies with several international standards, including GDPR and ISO/IEC 27001. These certifications demonstrate our commitment to maintaining high levels of security and data protection.

Please follow the link for more information: https://help.bvnk.com/hc/en-us/articles/11094354781074-How-is-BVNK-regulated