Bank-grade security, evidenced by default.
Missing Linx™ protects the systems that protect accounts. Every control is designed to pass a Tier 1 bank's vendor review.
Certifications & frameworks
SOC 2 Type II
AICPA — Security, Availability, Confidentiality
In audit window
ISO/IEC 27001
Information security management system
Roadmap Q3
PCI DSS Level 1
Payment card data handling
Service provider scope
GDPR
EU General Data Protection Regulation
Aligned — DPA available
CCPA / CPRA
California Consumer Privacy Act
Aligned
PSD2 SCA
EU Payment Services Directive 2
Compatible
How we protect customer data
Encryption everywhere
TLS 1.3 in transit, AES-256 at rest, customer-scoped keys via envelope encryption.
Least-privilege access
SSO + hardware MFA, scoped IAM roles, just-in-time access with full audit trail.
Isolated tenancy
Enterprise customers can opt into single-tenant or in-VPC deployments in US, EU and APAC regions.
Hash-chained ledger
Every risk decision is SHA-256 chained to the previous, producing tamper-evident, exportable evidence for auditors and regulators.
Data residency
Pin processing and storage to the US, EU or APAC. No cross-region replication without explicit consent.
Continuous monitoring
24/7 SOC, EDR on every host, anomaly detection on the control plane, weekly penetration testing.
Sub-processors & legal
- Data Processing Addendum (DPA)Available on request
- Standard Contractual Clauses (SCCs)Included with DPA
- Sub-processor listNotified 30 days before any change
- Responsible disclosuresecurity@missinglinx.example
