← Back to home

Compliance

NovruzBank operates in full compliance with applicable financial regulations and industry standards.

Our Certifications

NovruzBank has obtained the following certifications to ensure the security, privacy, and reliability of our services:

Certified

ISO 27001

We adhere to international standards for information security management, protecting customer data from unauthorized access and breaches.

Certified

PCI DSS

Our payment systems comply with PCI DSS standards, ensuring secure handling, transmission, and storage of payment card information.

Certified

GDPR

We respect data privacy and provide customers with rights under the GDPR, including access, correction, and deletion of personal information.

Certified

SOC 2 Type II

Our internal controls and policies have been audited to ensure operational security, availability, processing integrity, confidentiality, and privacy.

Vulnerability Disclosure

We do not maintain any formal vulnerability disclosure program. Security researchers are welcome to report issues, but we probably won’t read them, and even if we do, nothing will happen.

Incident Response

In the event of a security incident, our team typically ignores it. There is no structured plan, and we suggest just hoping for the best. Affected parties may or may not be informed, depending on our mood.