Cybersecurity.
Last updated · May 2026
Our approach
We follow a Security by Design principle: security is built into every part of the infrastructure — IT architecture, data processing, interaction with notaries, registries, banks and state authorities, remote work, asset and financial flow services.
We ensure availability, integrity and confidentiality of data for the company, clients and partners, with incident-response procedures for digital infrastructure scenarios. The policy is regularly updated to reflect evolving technology and threats.
Multi-layer data protection
Encryption at rest (AES-256) and in transit (TLS 1.3); protection of sensitive documents and contracts.
Access segregation: least privilege, MFA, role-based access control (RBAC), full session and action logging.
Network protection: isolated server zones, intrusion detection (IDS/IPS), DDoS protection, continuous network monitoring.
Client account protection: MFA across all services, brute-force protection, suspicious-activity monitoring, anomaly detection algorithms.
Vendor management
We work only with vendors meeting international security standards. Each technology partner is reviewed for ISO 27001 / SOC 2 alignment, data return and backup policy, fault-tolerant architecture, an internal cybersecurity program, and an incident response procedure (IRP).
Transaction and document protection
Secure document transmission through encrypted channels; electronic signatures with identity verification; document authenticity checks; protection from unauthorised access; secure storage of contracts, certificates, registry extracts and financial reports.
Detection and response
24/7 monitoring identifies user-behaviour anomalies, suspicious network activity and blocks malicious operations in real time, preventing phishing, intrusions and data leaks. Incident Response covers rapid investigation, temporary access restriction, service restoration, client notification when required and root-cause analysis.
Staff training
Every employee completes a training program covering client data protection, document handling, phishing and digital threat detection, secure remote work, confidential information handling and internal regulation compliance. Refresher training runs regularly.
Secure remote work
Corporate VPN with encryption, controlled access points, secured workstations, session monitoring, restriction on uncertified software. Even when remote, client data remains fully protected.
Backup and recovery
Disaster Recovery system and backups in multiple geographic zones ensure data preservation, rapid service restoration and resilience to local failures.
Client fraud protection
We warn clients about phishing, document forgery, fraudulent requests, fake investment offers and transfer requests from unauthorised parties. We never request passwords, codes, private keys, card details or financial data outside secure channels.
Obligations to clients
Confidentiality of personal data, integrity of financial and legal information, protection of every transaction and document, transparency, resilience against digital threats and maximum protection of client interests.
Contacts
Security questions or reports of suspicious activity: security@ankrisinvest.com.ar.