Legal & Compliance

CNBV ISO/IEC 27001 ISO/IEC 27701 Certificado de Protección de Datos
Compliance

Regulatory compliance is not optional: it is the foundation of every loan.

At Finvero, information security and personal data protection are built into every product: from Digital Origination and the Alternative Score to the credit Marketplace.

We hold the international ISO/IEC 27001 and ISO/IEC 27701 certifications and apply administrative and technical controls that protect the information of our clients and their users.

Our solutions are designed for institutions regulated by Mexico's CNBV, with controls aligned to its information security provisions, and comply with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

Security and privacy

Certifications and regulatory frameworks

ISO/IEC 27001

Information security management system certified under the international standard.

  • Information security risk management
  • Administrative and technical controls
  • Protection of client and user data

ISO/IEC 27701

Privacy and personal data management with specific protection controls.

  • Personal data privacy management
  • Extension of the ISO/IEC 27001 certification
  • Your data does not train third-party models

NOM-151

Data message retention and electronic signature with a NOM-151 compliance certificate.

  • Data message retention
  • Electronic signature with promissory note under NOM-151
  • NOM-151 certificate for every document

LFPDPPP and INAI

Compliance with Mexico's LFPDPPP and a Binding Self-Regulation Scheme before the INAI.

  • Compliance with Mexico's LFPDPPP
  • Binding self-regulation before the INAI
  • Handling of ARCO data rights

CNBV-regulated institutions

Solutions with controls aligned to the CNBV's information security provisions.

  • Designed for regulated institutions
  • Controls aligned to CNBV provisions
  • Auditable and traceable decisions

OWASP and NIST

Secure development and data encryption in line with international standards.

  • Secure development following OWASP
  • Encryption aligned with NIST standards
  • Identity validation with RENAPO and INE

Questions about privacy or compliance?

Write to us and our team will get back to you.

Contact us