How we protect your data
Precisa is built and operated by Finezza Information Technologies, handling data for NBFCs, banks, CA and forensic audit firms, and government investigation teams across India.
1,000+ Clients | 25+ Countries | 850+ Banks Supported | 1,200+ Statement Formats | 1.5M+ Statements Processed
CERTIFIED
Independently verified, not just claimed
ISO/IEC 27001:2022
Available on request
Certified by AMERICO Quality Standards Registech (UAF-accredited).
Request report →
SOC 2 Type II
Available on request
The full report is available on request, once we’ve confirmed who’s asking.
Request report →
How we secure it
Per-client data isolation
Every client’s transactions and analysis live in a dedicated database schema, kept separate from every other client’s data. No shared tables, no cross-client queries.
Restricted access
Database access is limited to a single admin credential, held only by our DevOps lead. Developers and support staff have no standing access to client data.
Encryption in transit and at rest
Data is encrypted in transit and at rest using industry-standard protocols, covering bank statements and reports as standard, not an optional tier.
Independent security testing
Independent firms run periodic penetration tests covering the OWASP Top 10. Findings are logged and worked through as part of our release cycle.
Why this matters for your compliance team
IT Act, 2000
Section 43A and SPDI Rule 8 treat a certified ISO 27001 implementation as meeting India’s reasonable security practices bar. Finezza’s certificate, which covers Precisa, satisfies that directly.
RBI outsourcing rules
RBI requires banks and NBFCs to check a vendor’s data segregation and access controls before signing on. This page answers that check directly.
DPDP Act
Consent, notice and retention detail live in our Privacy Policy, phased in through May 2027. This page covers security, not personal data rights.
Frequently asked questions
Precisa runs on a private AWS/GCP cloud instance. Access credentials are held only by authorised DevOps personnel.
Yes. Each client gets a separate database schema, structurally isolated from every other client on the platform.
Industry-standard encryption, in transit and at rest, applied across our infrastructure. Full specifications available on request.
Yes, periodic penetration tests covering the OWASP Top 10, tracked through to remediation.
Yes. Standard retention is 45 days post-subscription, shorter on request.
Loan origination, loan management and financial transaction analysis, issued to Finezza Information Technologies.
Reach out through our contact page and tell us what you need it for.
Because that's what your compliance or risk team is likely checking against.
Need something more specific?
Talk to us about a SOC 2 report, a pentest summary or anything else.