SECURITY AND PRIVACY

Your trust and safety are our top priorities.

Verto was founded on the principle that you have a right to your financial information. You should get to decide where, how, and with whom it’s shared. That’s why we’re building our product with security and transparency in mind.

We are compliant with FINTRAC Canada’s regulations and registered as a Money Service Business.

We operate at regulation to deliver peace of mind.

Verto uses world-class security technology to keep you, your data and your money safe.

Regulated by FINTRAC

Cloud Dev Best Practices

Bank-grade security

256-bit SSL encryption

NSF Return Policy

Secure Bank Connections

Compliance and Governance Standards

FINTRAC Canada Regulated

Verto is a registered Money Services Business regulated by FINTRAC, the Financial Transactions and Reports Analysis Centre of Canada.

FINTRAC is the agency of the Government of Canada responsible for facilitating the detection, prevention and deterrence of money laundering, terrorist activity financing and other threats to the security of Canada.

Payments Canada Compliance

Verto transactions are classified as electronic money transfers (EFTs) and are executed according to Pre Authorized Debit agreements (PADs). Money is securely transferred straight from one CIDC insured Canadian financial institution to another via EFT – a fast, safe, and convenient way to conduct transactions built on Payments Canada’s infrastructure.

Payments Canada and its participant financial institutions established terms and conditions to make sure that PADs are properly authorized and to protect against improper withdrawals.

Regular independent audits.

Verto’s infrastructure, API’s, and integrations and security controls get regularly audited to ensure a holistically secure system for our customers.

We get these independent audits done for regular additional assurance that our business process, information technology and risk management controls are properly designed.

Transact with Confidence

System Security

Authentication & Access Controls

All customer data is protected with the same level of sensitivity and is subject to strict controls. Customer data access is strictly controlled and allowed only when absolutely necessary and in accordance with our data security policies. Customer data is only accessible to authorised Verto employees.

Secure cloud infrastructure.

We use modern PCI-DSS & SOC2 compliant cloud technology providers to host Verto and our APIs. By using cloud infrastructure, we’re able to leverage years of safety enhancements to better protect data. AWS is certified with ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018 and SOC 1/2/3.

Separation of tech environments

We keep development and production servers in different cloud environments, as per industry best practises. To avoid security or privacy issues or errors, we use different security principles for each environment and only give the requesting entity access to the data they require.

In-house Support

Our internal team of experts is there for you to quickly resolve issues and questions whenever needed.

Application Security

Encryption

When you connect your bank account with Verto, we help keep your data with best-in-class encryption protocols like the Advanced Encryption Standard and Transport Layer Security.

2-FA and Biometrics

We protect your Verto account with two-factor authentication, biometric Face ID, and Touch ID for added protection (2FA) on your iPhone and Android apps, to protect your account from being compromised, with a second method to verify your identity.

Fraud Detection

Verto employs fraud detection algorithms that keep learning and improving to keep funds safe from bad actors at all times.

Our data promise.

Verto was founded on the principle that you have a right to your financial information. You should get to decide where, how, and with whom it’s shared. Your data is yours and yours alone.