Security & compliance
Every control, and what it does
The specific controls in Finterest today: what each one does, who controls it, and how it supports your firm's supervision. For verifications and data processing terms, see the Trust Center.
Quick answer
Finterest builds its controls into the outreach workflow and the platform underneath it. A person reviews every AI-drafted message before it sends, outreach is recorded for retention and review, email carries one-click unsubscribe, and call-recording disclosure controls stay off until a firm turns them on. Underneath, sensitive credentials are encrypted with AES-256, traffic uses TLS, each user's data is isolated, and administrative actions are logged.
In the outreach workflow
Controls on what gets sent
Pre-send review
- What it does
- Every message Fin drafts waits for a person to read it and send it. Bulk sends run from templates your team writes and approves, personalized only with merge fields.
- Who controls it
- The person sending reviews each AI draft. Your team decides which templates are approved for bulk sends.
- How it supports supervision
- Nothing AI-written goes out unread, and volume sends stay on wording your firm has already cleared.
Recordkeeping support
- What it does
- Outreach sent through Finterest is recorded, so the messages can be retained and reviewed later.
- Who controls it
- Recording happens automatically for outreach that runs through the platform.
- How it supports supervision
- Your compliance team can review what actually went out. It sits alongside your firm's archiving, not in place of it.
One-click unsubscribe
- What it does
- Email outreach includes a one-click unsubscribe link.
- Who controls it
- The recipient, with a single click.
- How it supports supervision
- Opt-outs come through a working mechanism in every email, which commercial email rules require.
Call-recording disclosure controls
- What it does
- Disclosure controls for call recording ship switched off.
- Who controls it
- Your firm. They stay off until your firm turns them on after its own legal review.
- How it supports supervision
- Recording practices follow your firm's legal decision rather than a vendor default.
Terms acceptance audit trail
- What it does
- Clickwrap acceptance of Finterest's terms is captured in a server-side audit trail.
- Who controls it
- Recorded by Finterest automatically when a user accepts.
- How it supports supervision
- There is a record of who accepted the terms and when, kept on the server rather than in the browser.
In the platform
Controls on how data is held
AES-256 encrypted credentials
- What it does
- Sensitive credentials are encrypted at rest with AES-256.
- Who controls it
- Handled by the platform for every account.
- How it supports supervision
- Sensitive credentials are not kept in plain text.
Encryption in transit
- What it does
- Data in transit is protected with TLS.
- Who controls it
- Handled by the platform; nothing to configure.
- How it supports supervision
- Data is protected while it moves, not only while it is stored.
Per-user data isolation
- What it does
- Each user's data is isolated from every other user's.
- Who controls it
- Enforced by the platform.
- How it supports supervision
- One professional's prospects and conversations are not exposed to another account.
Admin audit log
- What it does
- Administrative actions are logged.
- Who controls it
- Recorded by the platform whenever an administrative action is taken.
- How it supports supervision
- Changes made at the admin level leave a trail that can be reviewed.
Connected accounts, on your terms
- What it does
- Data providers connect through your own accounts. ZoomInfo, for example, connects with your firm's own ZoomInfo account through OAuth, with read-only access.
- Who controls it
- Your team chooses which accounts to connect.
- How it supports supervision
- Access runs through your own account, and for ZoomInfo it is read-only.
For exactly what we collect, how we use it, and how it is stored and shared, see the Privacy Policy.
A note on compliance language
Finterest is a software platform that supports your firm's compliance program. It is not a compliance authority, and using Finterest does not by itself satisfy FINRA, SEC, or firm-specific obligations. Your firm's principals and compliance team remain responsible for supervision, approval, and recordkeeping. Finterest supports, and does not replace, your firm's compliance. For the rules themselves in plain language, see the compliance guide.
Frequently asked questions
How does Finterest protect your data and your clients' data?
Sensitive credentials are encrypted with AES-256 at rest, data travels over TLS, each user's data is isolated from every other user's, and administrative actions are logged.
Does a person review AI-drafted messages before they send?
Yes. Every message Fin drafts waits for a person to review and send it, and bulk sends run from templates your team approves.
Does Finterest keep records of outreach?
Yes. Outreach sent through Finterest is recorded so it can be retained and reviewed. It supports your firm's archiving rather than replacing it.
Where can I find Finterest's verifications and data processing terms?
In the Trust Center: the Microsoft Verified Publisher listing, the Google CASA Tier 2 assessment, SOC 2 status, and how to request the Data Processing Agreement and subprocessor list.
Already a customer? For problems, issues or complaints, email support@finterest.com. We respond within one business day.