SECURITY & TRUST

Trust is part of the product.

Clearisk is built around a simple principle: the systems handling your post-trade operations should be secure, resilient, and aligned with your interests.

TRUST

Our financial interests are aligned with yours.

We don’t sell, rent, or provide information to third parties to help them advertise to you.

While personal or sensitive data may from time to time be captured during a workflow, rest assured that we do not want or need such data. It’s our view that using your personal or sensitive data in any manner other than to provide our services would be unethical and inconsistent with Clearisk’s values.

COMPLIANCE

A security program built for scrutiny.

ISO 27001 and SOC 2

Clearisk implements an Information Security Management System aligned to the requirements of ISO 27001 and is working towards obtaining ISO 27001:2022 certification. It is part of our roadmap to also become SOC 2 compliant, using Drata’s automation platform to continuously monitor our controls and maintain real-time visibility into our security posture.

Infrastructure

Our services are hosted on Amazon Web Services (AWS) and MongoDB, which continuously maintains certification for a variety of global security and compliance frameworks.

For more information about their certifications and compliance practices, please visit the sites for AWS Security, AWS Compliance and MongoDB .

SECURITY PRACTICES

Protection across the full operating surface.

Application Security

We use TLS everywhere in the Clearisk application. Your data is encrypted at rest and in transit using industry standards. We regularly scan our applications for vulnerabilities, apply security patches, and undergo annual penetration tests from a third-party security firm.

Data Protection and Disaster Recovery

Our systems were designed and built with disaster recovery in mind. All of our infrastructure is hosted in the cloud on AWS and MongoDB Atlas. Our data is automatically backed up daily and we regularly test that our backups are working and can be easily restored.

Corporate Security

All company laptops are actively managed. We require screen locks, full disk encryption, anti-malware protection, password manager use, and automatic updates. Access to services and source code is secured with two-factor authentication whenever possible, and personnel receive background checks and regular security awareness training.

RESPONSIBLE DISCLOSURE

Help us keep Clearisk secure.

If you’ve discovered a vulnerability in the Clearisk application, please contact us. We review all security concerns brought to our attention, and we take a proactive approach to emerging security issues.

security@clearisk.io