Security & Privacy
We adopt Modern Technologies to protect our clients, their funds, privacy, and ensure a smooth service delivery to their users and customers. Emiri Fintech’s security team laverages a number of security controls and procedures.
Security (Softwares & Apps)
We use HSMs certified FIPS 140-2 L3 to custody and protect master keys, perform key derivation, and run our policy engine.
We harden HSMs with our proprietary firmware extension, which enforces HSMs’ secure configuration and reduces their attack surface.
Signatures by hardware tokens provide multi-party approval using a quorum logic not visible from blockchain data.
Our key generation and key backup processes are certified ISAE 3402.
Infrastructure Security
Emiri Fintech runs infrastructures on leading cloud providers and local backup data centers with banking-grade security controls and industry certifications.
All our products and IT systems built and deployed require multi-factor authentication and follow segregation of duty principles.
All softwares we deliver are certified ISAE 3402, and includes automated security scans against supply-chain attacks.
We are well equipped with 24/7 security monitoring and incident response capabilities.
Internal Controls
At Emiri Fintech, we implement the three lines of defence model across platforms, composed of process owners, risk, internal & external audit.
Our development and product deployment processes are audited including: user access management, system updates, vulnerability handling, and BCP.
We carefully ensure that all staff undergoes background checks, and training sessions about security awareness, regulatory compliance, and data protection.
Emiri Fintech Solutions is expecting ISO27001 certification validation in 2025 to better give our clients confidence.
Security Audits
We hire world-class teams to pen-test all softwares or applications and review our source code before delivery.
Our clients for software and mobile app solutions can arrange their own pen tests and receive a copy of the product’s source code per contracts.
We run daily network scans of our endpoints and that of our clients and API endpoints to ensure 100% security.
Our previously trusted platforms are proof that we build binaries from given source code versions, certified by an external auditor.
Security Research
Our internal research unit Emiri Elites perform research projects and collaborates with world-class researchers.
We are open to all, we publish open-source software, research articles, and give talks at top tier global events.
Emiri Fintech Solutions support and collaborate with leading blockchain organisations to strengthen security protocols.
ISAE 3402 Type II
ISAE 3402 Type II, regarding risk
assurance and internal controls