Question 1

How is my data safe?

Accepted Answer

All data is encrypted in transit and at rest, protected by least-privilege access policies. We have designed the platform with built-in segmented services, and monitored infrastructure , and continuous monitoring to reduce attack surface and contain potential breaches.

Question 2

How is my PAN protected?

Accepted Answer

Sensitive identifiers such as PAN are encrypted, access-restricted, and never exposed in plain form outside secure, controlled system processes.

Question 3

Do you share data with third parties?

Accepted Answer

We do not sell personal financial data. Data is shared only with trusted service providers when required to operate the platform, under strict confidentiality and security obligations.

Question 4

What access do BluSummit employees have to user data?

Accepted Answer

Employee access is limited by role and granted only when necessary for operations or support, with all access logged, monitored, and subject to internal controls. We routinely run SOC audits and self-comply with industry level regulations, while also maintaining our legal obligations to the law of the land.

Question 5

What happens if your servers are breached?

Accepted Answer

Systems are designed with layered isolation so that a single breach does not expose complete user data. We maintain monitoring, backups, and recovery procedures to contain impact and restore service safely.

Question 6

Do you store credentials of any kind?

Accepted Answer

We do not store banking passwords or authentication secrets in plain form. Wherever credentials are required for secure integrations, they are handled using protected, encrypted connection methods.

Question 7

Can you access my money?

Accepted Answer

No. BluSummit is designed for visibility and analysis. It does not have the ability to execute transactions or move funds.

Question 8

How is access to my account protected?

Accepted Answer

Accounts are protected using secure authentication, session controls, and monitoring to prevent unauthorized access. We also enable 2FA for those accounts that need extra security and peace of mind on request.

Question 9

Has your security architecture been reviewed by third party accreditors?

Accepted Answer

Our security design and data flow are periodically reviewed by independent security professionals to validate controls, architecture, and compliance with accepted best practices.

Our Security Principles