generated: '2026-07-18'
method: searched
source: https://www.cxnpl.com/platform/data-security-and-infrastructure
description: >-
  Constantinople's published security and compliance posture for its AI-native
  core-banking platform. Certifications and audits are stated verbatim on the
  data-security-and-infrastructure and risk-and-compliance platform pages. A
  gated "Security Trust Centre" (Compliance, Controls, Data collected, Sub
  processors) is referenced from the platform documentation index but is not
  publicly hosted at a dedicated trust-center subdomain.
trust_center_url: null
security_pages:
- https://www.cxnpl.com/platform/data-security-and-infrastructure
- https://www.cxnpl.com/platform/risk-and-compliance
certifications:
- name: SOC 2 Type II
  status: certified
  evidence: '"SOC 2 Type II and ISO 27001 certified" — data-security-and-infrastructure'
- name: ISO 27001
  status: certified
  evidence: '"SOC 2 Type II and ISO 27001 certified" — data-security-and-infrastructure'
- name: ASAE 3150
  status: audited
  evidence: >-
    ASAE 3150 control audits referenced under risk & compliance controls.
audits_and_controls:
- Independent compliance and security audits (annual review and renewal)
- Penetration testing
- Red-team exercises
- Vendor security assessments
security_practices:
- Zero-trust architecture
- End-to-end encryption
- CI/CD pipeline security scanning
- SIEM integration
- 24/7 SecurityOps (SOC)
- Regular vulnerability patch cycles