Defacto · Trust Center

Defacto Trust Center

Trust center

Defacto maintains a public trust center documenting ISO 27001:2022, GDPR, PSD2, and ACPR authorization compliance.

CompanyFintechEmbedded FinanceLendingWorking CapitalInvoice FinancingCreditB2B PaymentsSMBFranceEurope

Trust center: https://trust.getdefacto.com

Certifications & Compliance

ISO 27001:2022GDPRPSD2ACPR authorization

Source

Trust Center

generated: '2026-07-18'
method: searched
probe: true
source: https://www.getdefacto.com/security
url: https://trust.getdefacto.com
security_page: https://www.getdefacto.com/security
trust_center_vendor: Bastion
certifications:
- ISO 27001:2022
- GDPR
- PSD2
- ACPR authorization
controls:
- Read-only bank account access (no transactions or changes)
- End-to-end encryption of banking credentials and sensitive data
- Hosting on AWS with geographic redundancy
- Regular external penetration testing
- Business Continuity and Disaster Recovery plans
- 24/7 system monitoring
- 99.995% uptime over trailing 12 months
regulatory:
- authority: ACPR (Autorite de Controle Prudentiel et de Resolution)
  role: Defacto is a financial institution authorized by the ACPR (France)
- directive: PSD2 (DSP2)
  role: European directive governing secure sharing of banking data
evidence:
- source: https://www.getdefacto.com/security
  keywords:
  - iso 27001
  - gdpr
  - psd2
  - acpr
- source: https://trust.getdefacto.com
  keywords:
  - trust center
  - bastion

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/defacto-trust-center"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.