///Creta
TRUST · SECURITY · COMPLIANCE

Trust, operationalized.

Trust isn't a slogan — it's a set of controls you can audit. This is Creta's current operating posture, without embellishment.

ACTIVE CONTROLS

What's already in production.

01

Data residency

Data hosted in Tier-3+ facilities (LATAM / EU regions) via our infrastructure partners.

02

Encryption

TLS 1.3 in transit. AES-256 at rest. Key management via dedicated KMS.

03

Access control

Role-based access, MFA enforced, quarterly access reviews.

04

Audit trail

Immutable logging for trade, admin and compliance events. Retention ≥ 5 years.

CERTIFICATIONS & POSTURE

Where we stand, honestly.

  • SOC 2 Type II
    In preparation
    Targeted Q4 2026.
  • ISO 27001
    Roadmap
    On roadmap for 2027.
  • Pen-testing
    Semi-annual
    Third-party pen-test cadence: semi-annual.
  • Vulnerability management
    Continuous
    Continuous scanning, SLA for critical fixes ≤ 72h.
  • Fraktal Wealth Management Group
    Parent group
    Compliance posture informed by our parent group's institutional framework.
INCIDENT RESPONSE

Four steps. No ambiguity.

  1. I

    Detect

    Automated alerting + 24/7 monitoring over security and trading events.

  2. II

    Triage

    Severity classification, owner assigned within minutes, war-room if needed.

  3. III

    Contain

    Key rotation, isolation of affected systems, credential revocation.

  4. IV

    Notify the client

    Notification within 24h for material incidents, with timeline and remediation plan.

SUB-PROCESSORS & PARTNERS

List of sub-processors available on request under NDA.

REGULATORY ALIGNMENT

MiFID II-aware processes, GDPR-aligned data handling, local regulator templates maintained by our affiliated counsel network.

This page reflects current operating posture. Creta delivers services via affiliated companies; certification status tracks the relevant operating entity.

Request our trust pack.

Request trust pack
Start now

Build what's next, with Creta.

Tell us where you want to go. A partner reaches out within 24 hours with a diagnostic and a path.

By submitting you agree to receive communications from Creta. We respect your inbox.