Security at Primary Portal

At Primary Portal, security is a fundamental priority in our operations. As a financial data platform handling sensitive information for banks and institutional investors, we implement industry-leading security measures to protect data integrity, confidentiality, and availability. Our security programme incorporates robust encryption, access controls, continuous monitoring, and strict third-party risk management to ensure a high standard of protection.

Visit our Trust Centre

Product Security

Data Protection & Encryption

We use industry-leading encryption to protect data at rest and in transit. All sensitive information is encrypted using AES-256 standards, while data transmitted is protected with TLS 1.2+ encryption. We also utilise AWS Secrets Manager and AWS Certificate Manager for secure credential and key management.

Secure Development & Infrastructure

Our infrastructure is designed with security at its core, leveraging cloud-native security configurations and best practices. We utilise Infrastructure as Code (IaC) to maintain consistent and secure deployments. Our development process integrates security checks and vulnerability scanning throughout the pipeline, ensuring potential threats are identified and mitigated early. We also conduct regular penetration testing to proactively safeguard our systems and maintain the highest security standards.

Compliance & Certifications

We are dedicated to maintaining the highest security and data protection standards. While we are actively working towards SOC 2 compliance, we already align our security controls with industry best practices to ensure the protection of sensitive financial data. We also carefully assess all vendors and partners to ensure they meet our security and compliance expectations before integration.

Enterprise security

Access Control & Authentication

To prevent unauthorised access, we implement multi-layered authentication and access management:

Multi-Factor Authentication (MFA): Required for all employees and privileged users.

Single Sign-On (SSO): Integrated across all internal systems for secure and seamless access.

Role-Based Access Control (RBAC): Permissions are assigned based on job responsibilities.

Automated Access Reviews: Conducted quarterly to ensure compliance

Employee Security Awareness & Training

Security is a shared responsibility. We enforce ongoing security awareness training to ensure all employees adhere to best practices:

Mandatory Security Training: Conducted annually for all employees.

Quizzes: Regular testing to address any gaps in knowledge.

Incident Response & Business Continuity

We have a formalised Incident Response Plan (IRP) and a Business Continuity & Disaster Recovery (BCDR) plan to mitigate and respond to potential security incidents.

24/7 Monitoring & Alerting: Security logs and alerts are continuously reviewed.

Incident Response Procedures: A structured approach to incident identification, containment, and resolution.

Data Backup & Recovery: Off-site encrypted backups are taken regularly, with a 7-year retention policy.

Disaster Recovery Testing: Conducted annually to ensure resilience.

Security at Primary Portal

Product Security

Cookie notice