TURNKEY LENDER INFORMATION SECURITY

TurnKey Lender is committed to protecting our clients and their data. The company’s information security policy exceeds regulatory requirements for data security going above industry standards and best practices. TurnKey Lender has SOC2 Type II compliance reports and the globally-recognized ISO 27001 Certification.

Book a call

TURNKEY LENDER SECURITY FEATURES

Permission-based access

Flexible user permissions management allows you to grant users access rights only to the workplaces and data they need in their day-to-day work.

API Clients

API Clients functionality allows integrating with third-party products and services using unique secret keys for each case.

Adjustable password strength

Adjustable password strength based on your requirements and the local regulations.

Two-factor authentication

Two-factor authentication for borrowers and staff.

img_Turnkey-Lender_turnkey-lender_icons_Web-application

Web application security

The web application is protected against XSS, scripts, SQL injections, and other common cyberattack types.

img_Turnkey-Lender_turnkey-lender_icons_HTTPS

HTTPS protocol

Sensitive information is only sent to the servers via the HTTPS protocol as per the best practices accepted on the web.

img_Turnkey-Lender_turnkey-lender_icons_server-side

Server-side processing

Sensitive information is processed on the server-side only.

Password encryption

All passwords are encrypted and then stored in the database as “Salted Hash” (cryptographic security measure).

Temporary user lockout

The System supports temporary user lockout. It takes place after multiple failed authentication attempts.

img_Turnkey-Lender_turnkey-lender_icons_anti-ddos

Anti-DDos protection

TurnKey Lender security is enhanced with anti-DDoS throttling protection.

img_Turnkey-Lender_turnkey-lender_icons_fraud-prevention

Fraud prevention rules

A wide array of fraud-prevention rules built-in.

Activity monitoring

Streamlined activity monitoring and audit trail capabilities allow to always reliable documentation of all actions taken by users.

CERTIFIED AND COMPLIANT

SOC 1 Type I

SOC 2 Type II

ISO/IEC 27001:2022 and risk management

ISO/IEC 27002:2022 clauses and controls

ISO/IEC 27017:2015

ISO/IEC 27018:2019

GDPR 2016

NIST

OWASP

IMDA Singapore

PCI DSS