Security

Our Commitment

bankVOD is committed to safeguarding the confidentiality, integrity, availability and privacy of information. To achieve this objective, bankVOD has adopted the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), incorporating its standards, guidelines, and best practices to effectively govern and manage information security and privacy risks. Our controls are also aligned with the requirements for System and Organization Controls (SOC) reporting, drawing on both NIST and ISO 27001 standards. bankVOD holds a SOC 1 Type II attestation, governed by the American Institute of Certified Public Accountants (AICPA). SOC 1 examinations are performed by accredited CPA firms under AICPA-issued standards to assess a service organization's internal controls over financial reporting (ICFR).

bankVOD recognizes that confidential information is vital and must remain protected regardless of where it is stored. The company’s Privacy Program, under the leadership of the Chief Information Security Officer, includes a specialized Data Privacy Function that keeps track of changes in data privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). This Data Privacy Function manages the organization’s data privacy framework and its execution to support compliance with applicable data protection regulations across the United States of America.