What security standards does Belvo follow?

We follow highly-rigorous standards in product and corporate security. Some examples include:

• Company-wide Information Security Policies
• Company-wide security trainings
• 2-factor authentication for all internal systems
• Web Application Firewalls (WAF) deployed in front of all of our APIs
• Regular penetration tests performed by a third-party firm
• Extensive security signals monitoring and real-time alerting
• Data encryption using strong Cryptography (AES-128-CBC)
• Option to use customer-owned encryption keys instead of Belvo's own keys exposed in our APIs and SDKs