Protecting account access and administrative records.
The package includes practical web-security controls, while users and administrators remain responsible for secure credentials and hosting configuration.
Account security
Passwords are protected using industry-standard password hashing. Access to client accounts requires an authenticated session, while administrative functions are restricted to authorised administrators.
Form and data security
Forms that create or modify records use anti-forgery protection. Database operations use parameterised queries to reduce the risk of unauthorised database commands.
Document security
Uploaded documents are validated by file type and size, renamed using randomly generated identifiers and stored in a protected area. Access to client documents is restricted to authorised users and administrators.
Administrative accountability
Material administrative actions are recorded in an audit log. Financing values, application decisions and completed withdrawal records must only be updated when supported by appropriate documentation and verifiable evidence.
User security guidance
Use a strong and unique password, keep your device and browser updated, and always log out when using a shared device. Nexus Financial will never request your password, one-time authentication code, wallet seed phrase or private key.