<aside> <img src="/icons/reorder_gray.svg" alt="/icons/reorder_gray.svg" width="40px" /> NAVIGATION

</aside>

Institutional-grade security for safeguarding client assets

Fipto's platform meets the highest security standards to help reduce compliance burdens for your business and keep your corporate treasury safe.

<aside>

Regulated

Fipto is committed to working closely with regulators where it operates. Fipto currently holds different licences and registrations or regulatory approvals.

France

Fipto France SAS is registered as a Virtual Asset Service Provider (VASP) by the Autorité des Marchés Financiers (AMF) (registration number E2023-069) for the following services : (i) custody of digital assets on behalf of a client, (ii) buying or selling digital assets for legal tender and (iii) trading of digital assets against other digital assets.

Luxembourg

Fipto France SAS is registered as a Virtual Asset Service Provider (VASP) by the Commission de Surveillance du Secteur Financier (CSSF) (registration number @0000013) for the following services : (i) Custody or administration of virtual assets or instruments for the control of virtual assets, including the custody portfolio service, (ii) Exchange service between virtual assets and fiat currencies, including the exchange service between virtual currencies and fiat currencies, (iii) Exchange service between one or more forms of virtual assets and (iv) Transfer of virtual assets.

Switzerland

Fipto Swiss Ltd is a VQF member (Verein zur Qualitätssicherung von Finanzdienstleistungen). The VQF, originally established as a quality assurance organisation for the financial centre of Zug, has held the function of an official FINMA-recognised Self-Regulatory Organisation (SRO) pursuant to the Anti-Money Laundering Act (AMLA) since 1998.

EMI Partner

Fipto France SAS, is a partner of Modulr Finance B.V., a company registered in the Netherlands with company number 81852401, which is authorised and regulated by the Dutch Central Bank (DNB) as an Electronic Money Institution (Firm Reference Number: R182870) for the issuance of electronic money and payment services. Your fiat account and related payment services are provided by Modulr Finance B.V.

</aside>

<aside>

Segregated accounts

Client funds in both fiat and cryptocurrencies are always segregated and separated from Fipto's assets, as per law requirements.

</aside>

<aside>

ISO certified

Fipto is ISO/IEC 27001:2022 certified for information security, cybersecurity and privacy protection.

</aside>

<aside>

KYC

Fipto requires mandatory KYC to be undertaken to onboard any new client in order to comply with legal and regulatory obligations including, but not limited to, rules governing anti-money laundering, counter-terrorism financing and sanctions.

This is part of their anti-money laundering and countering the financing of terrorism (AML/CFT) compliance efforts aimed at combating financial crime and ensuring the compliance of our customers' operations.

</aside>

<aside>

Infrastructure

Data

Hosting: All Client Data is hosted in AWS servers located in Europe that adhere to the highest compliance and certification standards, including but not limited to GDPR, HIPAA, and SOC 2. Client data is protected and stays within the EU at all times.Sensitive data such as passwords and authentication tokens is never logged.
Encryption: All data transmitted between our service and its users is encrypted in transit using industry-standard encryption protocols, TLS v.1.2. Additionally, the data stored within our service is encrypted at rest using AWS Key Management Service (KMS), ensuring the highest level of protection for client data.
Service Continuity: Our service data is continusously backed up on AWS to ensure data durability and to prevent data loss. Our disaster recovery strategy is designed to minimise service downtime and data loss in the event of a critical incident. We leverage AWS' multi-availability zone infrastructure to the fullest extent possible in order to provide redundancy and ensure service continuity.

Testing

Vulnerability scans on Fipto's API are executed automatically every week.
Infrastructure configuration scans are executed in real time.
Penetration tests are executed every year. </aside>