Globe Custody Information Security & Data Protection Policy Commitment Statement
-
Commitment to Security
At Globe Custody, protecting our clients’ financial data and ensuring the integrity of our systems is a top priority. We implement industry-leading security controls to safeguard information against unauthorized access, misuse, loss, or disclosure.
-
Data Privacy & Confidentiality
Globe Custody collects and processes personal information only for legitimate business purposes.
Client data is stored and transmitted using strong encryption.
Data access is restricted to authorized personnel under the principle of Least Privilege.
We maintain policies aligned with CSCRF, and applicable financial-sector privacy regulations.
-
Secure Infrastructure
All network traffic is protected by next-generation firewalls, advanced threat-detection systems, and continuous monitoring.
Globe Custody maintains segmented and hardened internal systems to minimize risk exposure.
Production systems operate in secure, compliant environments with built-in redundancy, DDoS protection, and disaster-recovery capabilities.
-
Encryption & Data Protection
In-Transit Encryption: All communication between clients and our servers uses modern, secure encryption protocols.
At-Rest Encryption: Sensitive financial data is encrypted using AES-256 or industry-equivalent standards.
Globe Custody does not store plaintext credentials; all authentication data is securely hashed and salted using strong cryptographic algorithms.
-
Identity & Access Management
Multi-Factor Authentication (MFA): Required for all internal and administrative system access.
Role-Based Access Control (RBAC): Ensures employees can access only the resources necessary to perform their duties.
Access logs are continuously monitored, recorded, and regularly reviewed to detect and prevent unauthorized activity.
-
Continuous Monitoring & Threat Management
Globe Custody operates a 24X7 Managed SOC solution to continuously monitor systems for suspicious and malicious activity.
We leverage SIEM platforms, endpoint protection, and advanced threat-intelligence feeds to rapidly detect and respond to security incidents.
Regular vulnerability scanning and penetration testing are conducted by independent third-party security experts.
-
Third-Party Risk Management
Vendors and service providers undergo thorough due-diligence reviews and must meet Globe Custody security and compliance requirements.
All contracts include data-protection obligations and strict confidentiality clauses.
-
Compliance & Certifications
Globe Custody maintains compliance with relevant financial-sector and cyber security frameworks
-
Incident Response & Business Continuity
Globe Custody maintains a tested Incident Response Plan to rapidly identify, contain, and remediate security threats.
Clients are promptly notified of any data breach in accordance with applicable legal and regulatory requirements.
Business Continuity and Disaster Recovery (BCDR) plans are in place to ensure service continuity during unforeseen disruptions.
-
Client Responsibilities
To ensure a secure environment, Globe Custody encourages clients to:
Use strong, unique passwords and enable multi-factor authentication (MFA) wherever available.
Keep all software, applications, and devices up to date with the latest security patches.
Report any suspicious activity immediately to Globe Custody support.