generated: '2026-07-18'
method: searched
probe: true
source: https://www.getdefacto.com/security
url: https://trust.getdefacto.com
security_page: https://www.getdefacto.com/security
trust_center_vendor: Bastion
certifications:
- ISO 27001:2022
- GDPR
- PSD2
- ACPR authorization
controls:
- Read-only bank account access (no transactions or changes)
- End-to-end encryption of banking credentials and sensitive data
- Hosting on AWS with geographic redundancy
- Regular external penetration testing
- Business Continuity and Disaster Recovery plans
- 24/7 system monitoring
- 99.995% uptime over trailing 12 months
regulatory:
- authority: ACPR (Autorite de Controle Prudentiel et de Resolution)
  role: Defacto is a financial institution authorized by the ACPR (France)
- directive: PSD2 (DSP2)
  role: European directive governing secure sharing of banking data
evidence:
- source: https://www.getdefacto.com/security
  keywords:
  - iso 27001
  - gdpr
  - psd2
  - acpr
- source: https://trust.getdefacto.com
  keywords:
  - trust center
  - bastion