Security for those who control the cash
We protect the financial data that supports your company's treasury.
Infrastructure and Technology
Our platform is built on a robust and scalable infrastructure, with security integrated by design:
Hosting on AWS, with redundancy and high availability.
Firewalls and intrusion detection systems to shield critical environments.
End-to-end encryption, protecting data both at rest and in transit.
24/7 monitoring and proactive alerts to anticipate risks.
Safety processes by design, incorporated into each development cycle.
Certifications and Compliance
Datanomik operates in compliance with the highest regulatory standards
ISO 27001 certification in information security, an international standard.
LGPD compliant, with appropriate privacy and data protection practices.
Regulated by the Central Bank of Brazil, complying with all applicable standards.
Integrated with Open Finance, ensuring transparency and security in connections.
SOC 2 Type II em processo de certificação — em breve.
Platform Security Features
At Datanomik, every access and every operation has additional layers of protection:
Two-factor authentication (2FA/MFA) to reinforce login security.
We add an extra layer of protection to your login. In addition to your password, our platform requires a second identity validation (2FA/MFA) to ensure that only authorized users access the system. This shields your account against unauthorized access, even in cases of credential compromise.
Single Sign-On (SSO) with Google, Microsoft, and other trusted providers.
Simplify access to the platform using your existing corporate credentials. With our native Single Sign-On (SSO) integration, your team logs in via Google, Microsoft, and other trusted providers with a single click, ensuring day-to-day agility without giving up security.
Bank Connectivity with End-to-End Encryption.
We use bank-grade security protocols, including TLS 1.2+ encryption for protection in transit and AES-256 for data at rest. This creates a shielded communication tunnel, ensuring the complete confidentiality and integrity of financial information between your company and the banks.
Real-time access and activity monitoring.
At Datanomik, security never sleeps. We continuously monitor all access and activity on our platform, ensuring complete 24/7 traceability. Our detection system identifies anomalous behavior instantly, ensuring that your financial operations and sensitive data are protected against unauthorized access at all times.
Segregation of users and permissions, ensuring that each collaborator only accesses what is relevant to their role.
We ensure the protection of your data through a strict segregation-of-duties policy. At Datanomik, we apply the principle of least privilege: each employee has permissions strictly limited to what is necessary to do their job. This ensures that sensitive information remains restricted to the right people only.
Governance and Compliance
Our security structure is grounded in strict privacy and control policies. We keep our processes and guidelines aligned with market best practices and current regulations, ensuring continuous data protection across all layers of the operation.
How can I protect myself?
Protect your passwords
Choose strong and unique passwords. Store them in a reliable password manager and never write them down in unprotected files or notes. Update passwords regularly and avoid reusing them across systems.
Never share bank credentials
Datanomik will never request your bank credentials (login, password, access token, PIX key, OTP codes) by email, SMS, phone or chat. Don't enter your credentials on unofficial sites or in forms received through unexpected links.
Be vigilant with suspicious orders
Don't click on unknown links, don't open attachments from dubious senders, and don't install apps or browser extensions without verification. If you receive a strange request on behalf of Datanomik, please validate directly via our official support channel.
Watch out for phishing attempts
Scammers can pose as suppliers, banks, or Datanomik itself. Always navigate directly to datanomik.com when accessing our platform. If you spot a fake site, report it immediately to our security team.
Use multi-factor authentication (MFA) and SSO when available
Activate MFA (e.g. authentication app or token) on all Datanomik accounts. Whenever your company supports it, prefer login via Corporate SSO (Single Sign-On) to reduce the risk of compromised credentials.
Segregation of roles and privileges
Grant only the access that is strictly necessary to each user (principle of least privilege). Periodically review permissions and remove access from employees, former collaborators, or outsourced employees as soon as they are no longer needed.
Monitor accesses and transactions
Regularly check the access log and transaction history on the platform. Any unknown activity must be reported and investigated immediately.
Review the Security & Privacy dashboard
Access and review your datanomik account/company's security settings — session settings, password policies, activity logs, and alerts. Keep internal policies aligned with best practices.
Keep your devices up to date
Install system updates and antivirus on computers and cell phones. Use secure networks when accessing financial information—avoid public Wi-Fi networks without VPNs.
Keep contact details up to date
Ensure that your account email and contact number are correct so that we can quickly alert you to any suspicious activity.
What to do if you suspect commitment
1. Change your password immediately.
2. Revoke active sessions and unknown devices.
3. Enable or reconfigure MFA.
4. Contact Datanomik Support through the official channel (support@datanomik.com) for investigation and blocking access, if necessary.
Extra good practices for banking credentials
• Never send proof of login or token photos via message.
• Prefer secure API integrations (such as those offered by Datanomik) instead of sharing manual credentials.
• Use viewing accounts when possible (read-only credentials) instead of accounts with full permission.
Questions & Answers
How does Datanomik ensure the security of my financial data?
We use bank-grade encryption (AES-256) for data at rest and TLS 1.2 or higher protocols for data in transit. Our infrastructure is isolated in a high-security cloud, ensuring your information is protected against unauthorized access throughout its entire lifecycle.
Is the platform LGPD compliant?
Yes. Datanomik acts strictly as a Data Processor, following all the guidelines of the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018). We implement technical and administrative controls to guarantee data subjects' rights and the security of data processing.
Who owns the data processed by the platform?
The client (you) is the exclusive owner of all data and information entrusted to the platform. Datanomik only processes this data to deliver the contracted financial automation services, under absolute confidentiality.
How is access to data controlled?
We adopt the Zero Trust model and the principle of least privilege. Access to the infrastructure requires multi-factor authentication and is restricted to authorized employees, with all activities recorded in immutable audit logs.
Does Datanomik hold security certifications?
We comply with the best international frameworks and are at an advanced stage of implementing ISO/IEC 27001:2022, the global reference standard for Information Security Management Systems.
What happens if there is a technical failure or service interruption?
We have a Business Continuity Plan and Disaster Recovery protocols. Our systems have redundancy across multiple availability zones, ensuring that critical treasury operations suffer minimal impact in the event of incidents.
Is there traceability of the operations performed on the platform?
Yes. We maintain complete audit logs of all transactions, accesses, and configuration changes. This ensures full transparency and allows your compliance team to audit any historical event whenever necessary.
How do you ensure the software has no vulnerabilities?
We follow a secure development lifecycle. All code goes through peer reviews and automated security testing before any deployment to the production environment.
Does the platform use Artificial Intelligence to make financial decisions?
No. Our platform operates with deterministic logic and predefined business rules. This ensures that all automations are predictable, explainable, and fully auditable, without the uncertainty risks associated with AI models.
How can I get support if I have questions about security?
We offer specialized consultative support with defined SLAs. You will have direct access to our security and compliance specialists through dedicated channels to resolve any technical or regulatory question.
Whoever controls the cashier controls the game.
And every game can only be won safely
