Security

Effective date: 20 October 2026. Last updated: 20 October 2026. Written to India’s Digital Personal Data Protection Act, 2023 and its Rules. Questions about this page: grievance@thefingene.com.

Because Fingene works with personal information, security gets its own page rather than a paragraph.

What we do

• Data is encrypted in transit and at rest.
• Each account’s data is separated, so one account cannot read another’s.
• Staff access is limited to what a job requires, and logged.
• Consent is tracked per kind of data, with a record you can inspect.
• We rate-limit sensitive endpoints and watch for abuse.

Responsible disclosure

If you find a vulnerability, write to security@thefingene.com. We acknowledge within 72 hours and will not pursue good-faith researchers.

Certifications

A detailed security overview, including any certifications, is published once they are in place. We do not claim certifications we do not hold.