We care about security at CapFlow.
CapFlow Funding Group™ Compliance and Security teams establish policies and controls, monitor compliance with those controls, and prove our security and compliance to third-party auditors.
Our policies are based on the following foundational principles:
Access should be limited to only those with a legitimate business need and granted based on the principle of least privilege.
Security controls should be implemented and layered according to the principle of defense-in-depth.
Security controls should be applied consistently across all areas of the enterprise.
The implementation of controls should be iterative, continuously maturing across the dimensions of improved effectiveness, increased auditability, and decreased friction.
CapFlow Funding Group™ prioritize the security and privacy of our customers’ data. Our infrastructure and processes are designed to meet the highest standards, including adherence to SOC 2 compliance requirements.
We are committed to achieving and maintaining SOC 2 compliance, focusing on the Trust Services Criteria:
Our security measures include:
In the event of a security incident, we have a comprehensive response plan to address and mitigate potential impacts. To report a security concern, please contact us at security@capflowfunding.com
Security is an ongoing priority. We regularly review and update our policies and practices to adapt to emerging threats and evolving industry standards.
