Trust Page

1. Security and Privacy Information

1.1 Data Protection and Classification

At actuary.aero, we understand the importance of safeguarding your data. We have established comprehensive global guidelines for data classification to ensure the security and integrity of all our information assets. These guidelines help us categorize data, systems, and assets, enabling us to implement appropriate security measures.

Asset Classification and Risk Management
‍
Data classification is integral to our risk analysis process. By understanding the sensitivity of our assets, we can accurately assess the impact of potential risks and tailor our security controls accordingly. Before each risk analysis, we define a clear scope, including asset classification, to ensure thorough evaluation.

Management and Labeling of Data
‍
To maintain effective data protection, we keep our asset classifications up to date. Our Security Officer conducts annual reviews to verify the accuracy and completeness of these classifications. We use an internal document to track these classifications. Furthermore, we recognize that customer data and personal data are inherently confidential. These data types are always labelled accordingly. When printing confidential information, the "confidential" caption is mandatory, especially when shared externally. In digital formats, we label confidential data when it is being transported or sent without granting direct access to the recipient through our secure, managed systems. This includes situations where data is exported from our systems and sent via non-encrypted channels. By implementing these rigorous data classification and labelling practices, we ensure that your information is handled with the utmost care and in accordance with the highest security standards.

We are committed to protecting your privacy. You can find comprehensive details about our data handling practices in our Privacy Policy, January 2023

1.2 Data Storage and Access Control

At actuary.aero, we employ robust measures to protect your data during storage and transmission. Here's how we ensure its confidentiality, integrity, and availability

Secure Storage

• Data Centres: We utilize secure data centres with strict access controls and environmental monitoring to protect our servers and infrastructure.
• ‍Redundancy: Our systems are designed with redundancy to prevent data loss in case of hardware failure. Backups: We perform regular backups of critical data, following a comprehensive backup policy based on data sensitivity and system criticality.

Access Control

• Principle of Least Privilege: We adhere to the principle of least privilege, granting users only the access they need to perform their duties.
• ‍Authorization Matrix: We maintain an authorization matrix to define and control access to specific systems and data based on roles and responsibilities.
• Password Security: We enforce strong password policies and encourage the use of password managers like KeePass and LastPass for secure credential storage.
  
• ‍Multi-Factor Authentication (MFA): We implement MFA whenever possible to add an extra layer of security to user accounts.
  These comprehensive measures ensure that your data is protected throughout its lifecycle, whether it's being stored, transmitted, or accessed.
• ‍User Groups and Policies: We utilize user groups and group-based access policies within our Azure Active Directory system to manage access rights efficiently.
  
  ‍
  

1.3 Security Certifications

ISO 27001 Certified: We are proud to be ISO 27001 certified, demonstrating our commitment to the highest standards of information security. This certification means:

• Robust Security Practices: We have implemented a comprehensive Information Security Management System (ISMS) to protect your data.
• Rigorous Risk Management: We regularly assess and mitigate potential security risks to ensure the safety of our platform.
• ‍Continuous Improvement: We are dedicated to ongoing security enhancements and regular audits to maintain our certification.
• Trusted Data Protection: An independent audit confirms that we meet strict international security standards. This certification assures you that your information is handled with the utmost care and in accordance with globally recognized best practices.

1.4 Vulnerability Management

We prioritize the security of our platform through continuous vulnerability monitoring. To achieve this, we partner with a leading Managed Detection and Response (MDR) provider. Their advanced agent, deployed on our endpoints, performs ongoing vulnerability scans. This allows us to proactively identify potential security weaknesses. In the event a vulnerability is detected, we receive immediate, actionable recommendations to resolve the issue swiftly and effectively, ensuring our platform remains secure. Furthermore, we conduct comprehensive annual penetration tests performed by a specialized security company. These tests simulate real-world attacks, providing an additional layer of security assurance and helping us identify and address any potential vulnerabilities before they can be exploited.

2. Company Information

About Us

At actuary.aero, we believe in transforming payment data into actionable insights, fostering trust and transparency across the payment ecosystem. Founded in 2020 as a fintech spin-off of the Perseuss Group, we bring over 15 years of experience in data handling, payments, and serving deferred delivery merchants in the travel and e-commerce sectors.

We operate as an independent and trusted third-party provider, bridging the gap between acquirers and merchants. Our mission is to empower businesses with accurate, timely, and complete payment and risk exposure insights, enabling them to make informed decisions that drive growth and optimize cash flow.
‍
Our secure communication platform facilitates mutual visibility of shared payment data and risk exposure, fostering collaboration between merchants, acquirers, schemes, and other financial providers. Leveraging advanced AI through our ActuaryAI platform, we provide predictive risk forecasting, anomaly detection, and comprehensive dashboards that transform raw data into strategic advantages.

We are committed to helping businesses navigate the complexities of deferred payments and future delivery models, addressing challenges like exposure forecasting, chargeback management, and risk profiling. By providing a single source of truth on risk exposure, we enable proactive engagement and optimization of financial operations, building a foundation of trust and reliability.

3. Terms of Service and Customer Support

You can reach our Customer Support Department via the following e-amil address: support@actuary.aero for questions about access to the portal, credentials, password resets, functionality requests, etc. They are happy to help wherever they can.

4. Partnerships and Collaborations

At actuary.aero, we are proud to collaborate closely with Mastercard to deliver our Payment Data Intelligence platform. As a critical component of Mastercard's service offering, we are deeply integrated into their platform, ensuring the seamless and secure processing of sensitive data. Mastercard places the highest priority on cybersecurity, and we are committed to meeting and exceeding their stringent security standards.To maintain this commitment, we undergo regular security audits conducted by Mastercard. These audits ensure that our cybersecurity practices are robust, up-to-date, and aligned with industry best practices. This rigorous oversight provides our users with the confidence that their data is protected by the highest level of security measures.Our partnership with Mastercard underscores our dedication to providing a secure and reliable platform, safeguarding the trust placed in us by all parties involved.