At Ninth Wave, we value the trust placed in our platform by financial institutions and businesses globally. Our platform is built to facilitate compliant, verifiable and trusted transactions between banks and their customers. Information Security at Ninth Wave is a strategic and cross-functional initiative. This is reflected in our compliance with widely accepted security standards and regulations, enterprise class security features, and our commitment to transparency.
Ninth Wave is now SOC 2 Type I certified. SOC 2 is an independent third-party examination, that demonstrates how Ninth Wave achieves key compliance controls and objectives in order to meet the trust principles for Security, Availability, and Confidentiality. This provides confidence and peace of mind to our customers that Ninth Wave has established best practices in order to support their security and operations.
Service Security
- Ninth Wave is built on tier-1 cloud infrastructure providers, with industry-leading compliance and security practices.
- Ninth Wave runs a vulnerability management program, enabling continuous vulnerability detection. We have an internal incident response procedure that is activated in case of a DDoS attack to begin specific mitigations such as country blocking and pattern blocking.
Application Security
- Ninth Wave security features include OAuth, MFA, Mutual TLS, and security incident handling. NexGen virus and malware scanning is deployed across all endpoints.
- Ninth Wave APIs are fully authenticated and secured over https.
- Ninth Wave uses third party penetration testing to probe our APIs and applications for vulnerabilities. Ninth Wave security team tracks both known and unreleased vulnerabilities and regularly patches the system to address these.
Data Security
- Ninth Wave facilitates geographic isolation with regional redundant data centers and backups within our tier-1 cloud providers.
- Ninth Wave uses NextGen firewalls to protect against known and unknown threats, including all OWASP top 10 and zero-day threats.
- Ninth Wave uses security compliance tools to monitor and manage policies our firewall rules and VPC flow logs to detect abnormal network traffic.
- Ninth Wave utilizes modern encryption protocols and keeps up-to-date. Strong encryption is used for data in transit as well as at rest, across our systems. For data in transit, TLS is enforced. For data at rest, industry-standard AES-256 encryption is used.
Data Privacy
- We are committed to keeping data private. Ninth Wave’s Privacy Policy clearly outlines how personally identifiable data is managed and secured.
- Ninth Wave does not store, re-use, re-purpose or sell any customer data.
- Ninth Wave’s information security policies comply with European Union General Data Protection Regulation (GDPR) EU 2106/679.
About Ninth Wave
Ninth Wave delivers secure, seamless, and standardized data connectivity to fintechs and financial institutions of all sizes, through a single point of direct integration to a universal suite of open finance APIs. With configurable controls, visibility, and insights into all data sharing and data acquisition connections between aggregators, third-party apps, and internal applications, Ninth Wave empowers financial institutions and their customers with access and oversight to their connected apps, enabling secure data exchange in a holistic and scalable open finance ecosystem. Offering solutions for retail and commercial banks, wealth managers, credit card issuers, tax providers, and more, Ninth Wave provides unparalleled connectivity and universal compatibility to complex information systems, unlocking innovation, potential, and performance for your data. Contact us to learn more about Ninth Wave’s secure data connectivity features. Empowering open finance. At scale, at last.
