Trust & Security
Built for regulated institutions.
Sciforn started inside regulated banking, and our clients are lenders, fund managers and administrators who answer to regulators and auditors. Security, data residency and a clean audit trail were part of the first version of every platform, and they shape how we build, host and support every one since.
SOC 1
SOC 2
Independently assured
Sciforn holds SOC 1 and SOC 2 reports, so your audit and risk teams can start their review from controls that independent auditors have already examined.
How your data is protected
Hosted where your regulator expects
Each platform is deployed in the region you need. EU data stays in the EU and UK data stays in the UK, or wherever your regulator wants it to be.
Encrypted in transit and at rest
Every record, document and transaction is encrypted in transit and at rest. The most sensitive fields go further, so investor tax IDs in Selene are stored encrypted and released in full only after a second person approves.
Access by role, with single sign-on
Role-based access, segregation of duties and approval matrices, with one sign-on for every module. Data Explorer applies row, column and sensitivity rules, so a question only ever returns what that user is allowed to see.
An audit trail nobody can edit
Every action and transaction is written to a log that can’t be edited or deleted, and field-level changes are recorded with who made them. You can show an auditor exactly what happened, when and by whom.
Maker-checker on what matters
Postings, payment approvals, fund closures, cutovers and changes to where documents are read wait for a second person to approve them, so no single user can push a sensitive change through alone.
Evidence you can verify
Report runs in Selene keep a SHA-256 fingerprint of their inputs and output, and a rerun is flagged when it repeats an earlier one, so a filed figure can be traced back and checked.
Private AI, on your terms
Our own data centre, your own hardware
Sciforn AI runs in our own private data centre on dedicated, segregated hardware for each client. Nothing runs in a public cloud, there is no per-token bill, and you keep full audit rights over the models, processes and infrastructure.
Never used to train anyone else
Your documents and data are never used to train a model for another client, and they are never passed to a third party.
Only the passages a question needs
The local document reader reads and searches documents on the platform’s own server and sends the model only the passages a question needs. Admins choose this screen by screen, and sending whole documents to the AI service needs a second admin to approve it.
Answers that show their working
Document answers cite the page they came from. Extracted fields link to the clause they were read from, and Selene’s fund assistant shows the ledger records behind every figure it gives.
AI agents that only draft
In Helios, AI agents prepare routine work for a person to approve, every run is logged in a tamper-evident record, and an admin kill switch stops them at once.
Your own engineering team
Every client has a dedicated team of Sciforn engineers who know the deployment, from the first workshop through every release after go-live.
Standards and assurance
SOC 1SOC 2ISO 20022SWIFTRBAC + SSOEncryption in transit & at restImmutable audit log
Time to move off your legacy systems?
Tell us what your security and risk teams need to see, and we’ll walk them through it.