Trust
Trust Center
One place for the security, compliance, verification, and data-handling information advisory firms and their compliance teams need to evaluate Finterest.
Finterest is built compliance-first for regulated advisory firms. Sensitive credentials are encrypted with AES-256 at rest and data is protected with TLS in transit; each user's data is isolated and administrative actions are logged. Outreach supports pre-send review, audit trails, and recordkeeping. Finterest is a Microsoft Verified Publisher and has completed Google's CASA Tier 2 security assessment for its restricted Google API scopes. Finterest supports, and does not replace, your firm's own compliance supervision.
Security
Sensitive credentials are encrypted with AES-256 at rest, data is protected with TLS in transit, each user's data is isolated from others, and administrative actions are logged. For the full list of controls in place today, see the security and compliance page.
Compliance support
Because Finterest is built for the advisory world, the controls a regulated firm needs are part of the product: pre-send message review, a server-side audit trail, recordkeeping support for retained communications, and call-recording disclosure controls that are off by default. For the underlying rules in plain language, see the compliance guide, or how Finterest supports compliance officers.
Verifications and assessments
Microsoft Verified Publisher
Microsoft has verified Finterest's publisher identity for our Microsoft 365 and Sign-in-with-Microsoft integrations, so the apps you connect are confirmed as genuinely ours. Publisher verification confirms the authenticity of the app's publisher and is not a security assessment or endorsement by Microsoft.
Google CASA Tier 2
Finterest has completed Google's CASA (Cloud Application Security Assessment) Tier 2 review, required for applications that use restricted Gmail API scopes. CASA is an independent assessment of the application against the OWASP Application Security Verification Standard; it is a security review, not an endorsement.
Data handling and legal
For exactly what we collect, how we use it, and how it is stored and shared, see our Privacy Policy and Terms of Service. A Data Processing Agreement and a current list of subprocessors are available to customers and prospects on request. Contact us and we'll provide them.
A note on compliance language
Finterest is a software platform that supports your firm's compliance program. It is not a compliance authority, and using Finterest does not by itself satisfy FINRA, SEC, or firm-specific obligations. Your firm's principals and compliance team remain responsible for supervision, approval, and recordkeeping.