COMPLIANCE
How HumanSignal supports Gramm-Leach-Bliley compliance for financial institutions, and what we provide to your compliance and vendor-management teams. Updated October 12, 2026.
Banks, credit unions, insurers, investment advisers, and other financial institutions are regulated under the Gramm-Leach-Bliley Act. Because this platform is their service provider, the safeguards contract, product controls, and evidence their compliance teams require are spelled out here — item by item.
The platform ships with role-based access, per-organization data isolation, mandatory MFA, full-disk encryption of stored secrets, TLS-only outbound mail, password hashing, rate-limited logins, CSRF protection, and an audit trail of every administrative action.
This page summarizes the platform's compliance posture. It is not legal advice; each institution's compliance and legal teams should evaluate the safeguards contract and controls against their own GLBA program. Contact support@fairlyoffensive.com for the current SOC 2 report, penetration-test summary, or a completed security questionnaire.