# FinBursa 360

Investment banking platform

Research: https://www.safecli.org/company/finbursa.com
Company: https://finbursa.com

## Evidence status

Procurement review needed
Source review: 2026-11-07T14:59:43.007Z
API: Unknown

Company-published claims, not independently verified controls. Unknown is not evidence of absence.

## Procurement checks

### Security assurance — Mixed claims — review

> ISO 27001:2022 Certified · SOC 2 Type I Completed · GDPR-Aligned Data Protection · Encryption

Source: https://finbursa.com/finbursa-access/founders
Reviewed: 2026-11-07T14:59:43.007Z

> ISO 27001 Certified

Source: https://finbursa.com/security
Reviewed: 2026-11-07T14:59:43.007Z

> SOC 2 Type II is planned as the next stage of our assurance program.

Source: https://finbursa.com/security
Reviewed: 2026-11-07T14:59:43.007Z

- [ ] Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### SSO & provisioning — Company-published

> Single Sign-On (SSO), Multi-Factor Authentication (MFA), and least-privilege access principles govern access to internal systems.

Source: https://finbursa.com/security
Reviewed: 2026-11-07T14:59:43.007Z

- [ ] Test SSO enforcement, user removal and privileged-account recovery.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Access controls — Not found


- [ ] Test least-privilege roles and cross-tenant access with separate test accounts.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Auditability — Company-published

> - Complete audit trail across every module

Source: https://finbursa.com/
Reviewed: 2026-11-07T14:59:43.007Z

> - Complete audit trail across every module

Source: https://finbursa.com/
Reviewed: 2026-11-07T14:59:43.007Z

- [ ] Verify administrative and data-access events, retention and export.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Data handling — Company-published

> Lawful-basis processes, Data Processing Agreements, Standard Contractual Clauses, and data-subject request workflows are maintained as part of FinBursa's data protection framework.

Source: https://finbursa.com/security
Reviewed: 2026-11-07T14:59:43.007Z

- [ ] Review DPA, subprocessors, retention, deletion, residency and AI training use.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Reliability & support — Company-published

> ### Backup & Disaster Recovery

Source: https://finbursa.com/security
Reviewed: 2026-11-07T14:59:43.007Z

- [ ] Request SLA, incident history, recovery targets and support escalation terms.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Product effectiveness — Not found


- [ ] Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

## Decision

- Owner:
- Intended use and data sensitivity:
- Blocking requirements:
- Pilot success criteria:
- Unresolved risks:
- Decision and review date: