Knight Fintech Trust Center

generated: '2026-07-19'
method: searched
source: https://knightfintech.com/ (certifications + security sections, rendered from assets/index-CrLbvaMm.js)
name: Knight Fintech Trust & Compliance
description: >-
  Certifications and security posture that Knight Fintech publishes on its own
  marketing site. Knight Fintech does not operate a dedicated trust center portal;
  these claims are rendered client-side from the site's JavaScript bundle in a
  "certifications" section and a security FAQ. Captured verbatim, including the
  distinction between achieved certifications and those the company describes as
  in progress.
trust_center_url: null
trust_center_note: >-
  No dedicated trust center, compliance portal, or downloadable audit-report request
  flow was found. Claims below live on the public marketing site only; no certificate
  numbers, auditors, audit dates, or scope statements are published.
certifications:
- name: CMMI Maturity Level 5
  status: claimed
  detail: Highest maturity level for process optimization.
  evidence: certifications card, alt text "CMMI Maturity Level 5"
  certificate_published: false
- name: ISO 9001:2015
  status: claimed
  detail: Quality Management System certified.
  evidence: certifications card, alt text "ISO 9001:2015"
  certificate_published: false
- name: ISO 27001:2013
  status: claimed
  detail: Information Security Management System certified.
  evidence: certifications card, alt text "ISO 27001:2013"
  certificate_published: false
- name: SOC 2 Type II
  status: in_progress
  detail: >-
    The company states its own "SOC 2 Type II compliance (in progress)". Separately it
    states its systems are hosted in "SOC 2 Type II certified data centers with 24/7
    monitoring" — that is a claim about its hosting provider, not about Knight Fintech.
  evidence: security FAQ answer and "Secure Infrastructure" security card
  certificate_published: false
- name: GDPR and local data protection compliance
  status: claimed
  detail: Stated as part of the security posture FAQ; no jurisdiction detail or DPA link published.
  evidence: security FAQ answer
  certificate_published: false
security_practices:
- Data encryption in transit (TLS 1.3)
- Data encryption at rest (AES-256)
- Multi-factor authentication (MFA)
- Role-based access control (RBAC)
- Regular security audits and penetration testing
- Secure cloud infrastructure with automatic backups
contacts:
  privacy: privacy@knightfintech.com
  support: support@knightfintech.com
  complaints: complaints@knightfintech.com
  security: null
caveats: >-
  All entries are provider self-claims sourced from marketing copy. No independent
  verification, certificate registry entry, auditor name, or report was located. No
  security.txt, vulnerability disclosure policy, or bug bounty program exists (see
  well-known/knight-fintech-well-known.yml).