Information Security Policy

This document sets out FLOWA PAY INC.'s policy position and control objectives, published for transparency and to support institutional due diligence. It is reviewed periodically and does not constitute legal advice. FLOWA PAY INC. makes no representation that it holds any licence, authorisation or certification except the FINTRAC Money Services Business registration expressly stated in the Regulatory Disclosures.

This policy sets out how FLOWA PAY INC. protects the confidentiality, integrity and availability of its systems and data.

Controls include encryption, access management, network segmentation, logging and monitoring, vulnerability management and secure development practices.

We maintain an incident-response capability to detect, contain, remediate and, where required, report security incidents.