Хранение
Banxa is a non-custodial agent in all customer dealings. Banxa does not custody any customer funds purchased on the platform and transfers assets directly to/from customer directed wallets. If a customer wishing to use Banxa’s services does not have a wallet, then we request they generate one before continuing to purchase crypto.
Платёжные и клиентские данные
All data sent to or from Banxa’s infrastructure is encrypted in transit using Transport Layer Security (TLS) version 1.2 or later. All Banxa data is encrypted at rest using AES-256 block-level storage encryption and stored in ISO27001 and PCI DSS compliant data centers. Banxa is compliant to the General Data Protection Regulation (GDPR), ensuring that all customer and employee personal information is treated with the highest level of security and in a lawful manner. All payment information is processed and stored following the strict Payment Card Industry Data Security Standards (PCI DSS).
Безопасная разработка
Banxa employs processes and tooling to continuously deliver secure software to our cloud infrastructure and applications. All code changes go through a code review process and are subject to static application security testing (SAST) to detect insecure code patterns. All dependencies are automatically updated and Banxa’s security team works hand in hand with engineering teams to provide assistance during the different stages of the software development lifecycle (SDLC). Banxa engineers participate in regular security training to educate about common vulnerabilities and secure development practices.
Внутренняя безопасность
Banxa employees are required to use company-provided devices that are managed through a mobile device management solution. This allows our security and IT teams to enforce security policies, deploy other endpoint protection solutions and manage devices remotely. All employees are enforced to use Single Sign-On, and Multi-Factor Authentication to access third party applications and services. Employees are subject to background checks prior to
employment and receive training on security guidelines and ongoing awareness. Employees are held to stringent security standards and interface regularly with the Security team.
Защита конечных точек
All Banxa managed devices are protected using enterprise grade Endpoint Detection and Response (EDR) services which are monitored 24/7 by a dedicated team of security professionals. Banxa also regularly scans for any newly discovered vulnerabilities and will mitigate these within a timely manner.