Portal Security and Access Policy
Security and access rules for authorised use of the Finfora Partners Portal.
1. Account Ownership
Each Portal account is issued to a specific Partner and must be used only by that Partner or by a person expressly authorised by Finfora under a documented process.
2. Credentials
Partners must keep passwords, PINs, OTPs, recovery codes and other credentials confidential and must not store them insecurely or disclose them to third parties.
3. Device Security
Partners should use supported devices, current operating systems and updated security software and should avoid accessing the Portal through compromised or public devices where sensitive information may be exposed.
4. Phishing
Finfora will not ordinarily request a Partner’s password or OTP by email, social media or telephone. Partners must treat unexpected requests for credentials or payment as potentially fraudulent.
5. Incident Reporting
A Partner must immediately report suspected compromise, loss of a device containing active Portal sessions, suspicious transactions or unauthorised access to admin@finforapartners.com.
6. Access Controls
Finfora will implement role-based or other reasonable access controls for personnel with administrative access to Partner information.
7. Monitoring
Finfora may monitor Portal activity, security events and system logs for security, fraud prevention, troubleshooting, audit and compliance purposes, subject to applicable law.
8. Suspension
Finfora may suspend an account where reasonably necessary to protect the Partner, other Partners, Finfora or the Portal from security or fraud risks.
9. Reactivation
Finfora may require identity or account verification before restoring access following a security incident.