Security

Our Commitment to Security

At Functional Finance, protecting the security and integrity of your data is a core priority. We employ a number of technical, organizational, and physical safeguards designed to protect the personal information and financial data under our control.

While we work hard to protect your personal data, the confidentiality and security of any communication or material transmitted to or from our site cannot be guaranteed to be 100% secure at any time. Any transmission of your information is at your own risk. We strongly advise you to ensure that any personal information you provide to us is done with appropriate care.

Data Encryption

All data transmitted between your browser and our servers is encrypted using industry-standard Transport Layer Security (TLS). Data at rest is encrypted using strong encryption algorithms to protect sensitive information stored in our systems.

Payment card data is collected and processed directly by our PCI-compliant payment processors and is never stored on Functional Finance servers.

Access Controls

Access to customer data is strictly controlled on a need-to-know basis. We use role-based access controls to ensure that employees and systems can only access the information necessary to perform their functions.

All internal access to production systems is authenticated, logged, and monitored. We require multi-factor authentication for privileged access to our infrastructure.

Account Security

We encourage all users to use strong, unique passwords for their Functional Finance accounts. We may require additional security procedures, such as multi-factor authentication, to access certain services.

You are responsible for maintaining the confidentiality of your account credentials. You should notify us immediately at support@functionalfi.com if you become aware of any unauthorized use of your account or any other breach of security.

• Use a strong, unique password that you do not use on other sites.

• Enable any available multi-factor authentication options.

• Log out of your account when using shared or public computers.

• Notify us immediately if you suspect unauthorized access to your account.

Incident Response

We maintain an incident response plan to quickly detect, contain, and remediate security incidents. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.

Our security team monitors our systems around the clock for suspicious activity and potential vulnerabilities.

Third-Party Security

We carefully vet the third-party service providers we work with, including payment processors and cloud infrastructure providers, to ensure they meet our security standards. Our agreements with service providers require them to maintain appropriate security measures to protect the data they process on our behalf.

Our payment processing partners, including Moov Financial, maintain PCI DSS compliance for the handling of payment card and ACH transaction data.

Vulnerability Disclosure

If you believe you have discovered a security vulnerability in our systems or services, we encourage responsible disclosure. Please contact us at security@functionalfi.com with a detailed description of the vulnerability. We will investigate all reports and work to address confirmed issues promptly.

Please do not publicly disclose any potential vulnerability until we have had the opportunity to investigate and remediate it.

Compliance

We maintain and regularly review our security policies and procedures to align with industry standards and applicable legal requirements. Our security practices are designed to comply with applicable U.S. state and federal data protection laws.

Contact Us

If you have any questions or concerns about the security of your information or our security practices, please contact us at:

Functional Finance, Inc. security@functionalfi.com hello@functionalfi.com