Formulary Financial protects your data with enterprise-grade governance, risk and compliance practices.
Artificial intelligence capabilities run on synthetic datasets. This means client data never contributes to model training, and each tenant operates in a segmented environment.
Multi-Factor Authentication
Account access requires multi-factor authentication and password policies designed to resist phishing, brute-force, and credential stuffing attacks.
Encrypted Infrastructure
Data protection spans infrastructure through AWS cryptographic services, maintaining encryption for data at rest and in transit with systems for certificate management, key rotation, and secrets handling.
Every action generates a record, capturing the lifecycle of data and operations with an unbroken chain of attribution. Audit trails allow transparency and traceability of decision-making point in time and through time.
Access rights mirror the legal and organizational structures of private markets, with an authorization model that understands the relationships between and properties of entities, funds, and individuals.
Information security enforces least privilege and need-to-know access, with data classification determining permission levels and zero-trust principles requiring verification of identity and intent at each interaction.
OUR COMMITMENT TO SECURITY
Trust is the foundation of our business and our number one value.
Our clients entrust us with sensitive, high-value financial data that powers their operations, and we treat this responsibility as core to our mission.
We apply zero-trust architecture, encryption at rest and in transit, and relationship-based access controls across all systems. Our environment is continuously monitored for threats and anomalies.
We operate on segmented cloud infrastructure with automated security tooling and engage third-party auditors to validate our controls. Security is an ongoing discipline. We built our program to exceed industry standards, not just meet them.
On track for SOC 1 Type I and Type II certifications. Reports are available upon request.
SOC 2 Type I certified, on track for SOC 2 Type II. Reports are available upon request.
Enterprise agreements with Anthropic and OpenAI, ensuring privacy and security of client data processing with AI.
Enterprise agreements with
AWS and Azure cloud providers, ensuring security and reliability of the platform.



