Security, Compliance and Certifications at Truvali
Security and compliance certifications define the technical and operational safeguards that protect sensitive financial data within enterprise software. For regulated institutions, these standards guarantee that transaction monitoring and fraud detection platforms operate with the highest levels of data integrity and system resilience.
Enterprise-Grade Security for Regulated Entities
Truvali, developed by Bitrelic, is built from the ground up to meet the stringent security demands of banks, fintechs, payment institutions, and regulated gaming operators. Operating from our offices in Manisa (Türkiye) and Podgorica (Montenegro), we ensure that our transaction monitoring and fraud detection infrastructure aligns with global compliance frameworks.
To support your risk management strategies, Truvali is designed to process high-volume transaction streams securely, executing risk scoring in under 200 ms per event. This speed is matched by a robust security posture that protects data both in transit and at rest.
Our Certification Framework
We maintain a comprehensive compliance program to verify our security controls. Bitrelic is actively pursuing and maintaining key international standards to ensure your peace of mind:
- Seven ISO Certifications: We are aligned with seven distinct ISO standards covering information security management, cloud security, data privacy, and business continuity to ensure comprehensive operational resilience.
- SOC 2 Type II (In Progress): We are currently undergoing the audit process for SOC 2 Type II compliance to provide independent validation of our internal controls over security, availability, and processing integrity.
Flexible Deployment and Data Sovereignty
We understand that data residency and infrastructure control are critical for regulatory compliance under MASAK, AMLA, and the EU AML package. To address these requirements, Truvali offers flexible deployment models:
- On-Premise Deployment: The platform can run on-premise directly inside your own infrastructure, ensuring that sensitive customer data never leaves your secure perimeter.
- Cloud and Hybrid Models: Secure cloud deployments that leverage our certified infrastructure while maintaining strict logical separation of data.
Compliant Workflows and Audit Trails
Beyond infrastructure security, Truvali ensures operational compliance through structured governance features:
- Human-in-the-Loop Approvals: Rules within the platform can be written in plain language and held for human approval before going live, preventing unauthorized or accidental changes to your detection logic.
- Pre-Analysed Cases: When an alert is triggered, cases arrive pre-analysed with full contextual data, reducing investigation time and ensuring clear documentation for audit trails.
- Regulatory Alignment: Our structured workflows and detailed logging help compliance officers easily export the necessary documentation required by FATF, MASAK, and European regulators during routine audits.
Common questions
- Can Truvali be deployed entirely within our own local infrastructure?
- Yes, Truvali can run on-premise inside your own infrastructure to satisfy strict data residency and sovereignty requirements. This deployment model ensures that sensitive transaction data remains entirely within your secure network perimeter.
- What certifications does the platform hold or have in progress?
- Bitrelic is currently working through seven ISO certifications and has a SOC 2 Type II audit in progress. These standards validate our commitment to information security, data privacy, and operational resilience.
- How does the platform prevent unauthorized changes to transaction monitoring rules?
- Truvali allows compliance teams to write detection rules in plain language and place them in a queue for human approval. This maker-checker workflow ensures that no rule changes are deployed to production without proper authorization and an audit trail.