SECURITY
How we protect data
Thousands of customers trust Forbury with their data, and this responsibility is something we take very seriously. We maintain administrative, technical and physical safeguards designed to protect our customers information, ensuring their data is secure, confidential and maintains its integrity.
Last reviewed: September 2022
Download our full IT & Security Information Pack for IT teams below. This includes information on Forbury, what to expect during the roll-out process, FAQs and key contact information.
Server and Data Storage
How does Forbury keep my data secure?
All data is encrypted during transit and is processed within the Microsoft Azure Australian region. All data is encrypted at rest and backed up to a geo-redundant location.
Are you ISO 27001:2013 Certified?
Yes, Forbury is ISO/IEC 27001:2013 certified. ISO 27001:2013 Certificate Directory
How does Forbury collect your data?
Via encrypted submissions to our cloud-based server when you undertake cloud-based calculations, and when you elect to store model inputs for back-up & retrieval purposes or to share, at your direction, with your nominated customers or capital partners.
Who has access to the confidential data?
The individual who uploaded the data, or if uploaded to a Team/Fund then the Team/Fund members with expressed permission. If you elect to utilise Forbury Sharing, Your Data will also be shared with your nominated, approved third parties.
How does Forbury secure user accounts?
Forbury establishes an individual user login for each authorised employee. Accounts are secured with one-way encrypted passwords, as well as support for SSO & MFA for additional security. For more info on these see our FAQ.
What is the backup frequency and what are the possible scenarios of data loss?
Forbury has established an actively updating geo-redundant database to minimise the potential database downtime in the event of a geo-specific service interruption. In an event, Forbury will redirect all database transactions to the geo-redundant database until service functionality to the primary database has been restored.
The geo-redundant database has a 5-10 minute transactional backup frequency, 12 hourly differential backups and weekly full backups that are persisted for 35 days for rollback purposes.
Is Forbury GDPR Compliant?
Yes. You can read the details in our privacy policy.
