Enterprise security
Access by role, separated duties, hardened systems and regular ethical-hacking tests.
Security
Built to run financial operations at scale, under regulation.
Access by role, two-person approval, a full audit trail, monitoring of every transaction, no single point of failure and support with defined response times. The difference between a good-looking demo and a platform you can trust with your customers' money.
Four things you can count on
Every transaction watched
Monitoring and an audit record of every transaction.
No single point of failure
If one module goes down, the rest keep running.
Support with response times
Four severity levels (S1 to S4) and three escalation levels (N1 to N3).
The right people, the right access, every change on record
- LoansYes
- TreasuryNo
- AccountingNo
- ReportsYes
- ConfigurationNo
Access by role
Each person sees and does only what their role allows (role-based access).
Separated duties
The person who makes a sensitive change is never the one who approves it.
Two-person approval
Sensitive changes need a second person's approval before they go live.
A full audit trail
Every change and every transaction is recorded: who, what and when.
Built to stay up, and to recover fast
99.5% uptime commitment
Written into our service agreements.
Backups across data centers
The platform runs across more than one data center by default (multi-zone).
Multi-region on request
For institutions that need it, the platform can run across regions.
Disaster recovery included
When we host the platform, disaster recovery is part of the service.
No single point of failure
If one module goes down, the rest keep serving customers.
Problems spotted early, and handled by the book
Every transaction is monitored and recorded, and AI spots unusual patterns so incidents are caught before they reach your customers. When something does happen, support works to defined response times.
Severity S1 to S4
Four severity levels, from S1 (critical) to S4 (minor), each with its own response time.
Escalation N1 to N3
Three escalation levels, so every case reaches the right people.
Our team, with yours
Your technology and operations teams work with the Cowally team directly.
Your data, your network, your choice of hosting
Your data, in your country
Data can stay in your country when your regulation requires it.
Private connections
Private links to your network, with fixed IP addresses for your access lists.
Hosted by us
We run the platform and infrastructure, with updates (regulatory ones too), monitoring, support and disaster recovery.
On your own servers
You run it in your own infrastructure, with licensed modules, documentation and support according to your plan.
Checks at sign-up
Identity, anti-money-laundering list and fraud checks on every new customer.
Reports to regulators
Built from the same data as the operation, with a full audit trail.
Designed by certified architects
Our leaders are certified in BIAN, the banking industry's open standard for modular design.
Questions about security
Yes. The platform goes through regular ethical-hacking tests.
The other modules keep running, and the incident is handled under our support levels.
Yes, when your regulation requires it.
Yes, through private links, with fixed IP addresses for your access lists.
Yes. You get licensed modules, documentation and support according to your plan.
Access is set by role, so each person sees and does only what their role allows.
Bring your technology and security teams
In one session our architects will walk your teams through the architecture, the controls and the support model, and answer their questions.