SOC
2
SOC 2 Type 2
Security controls
ISO
27001
ISO/IEC 27001
Information security
★
★
★
★
★
★
★
★
★
★
★
★
GDPR
GDPR
Data privacy
SOX
ICFR
SOX
Financial controls
EU
HOSTED
EU-hosted
Data stays in the EU
European Union
EU
PSD2 · PSD3-ready
Mandatory
Safeguarding and reconciliation of client funds, with daily evidence.
EMD2
Mandatory
Safeguarding of e-money funds against the ledger.
DORA
Supported
ICT logs, incident evidence and third-party controls.
IFR 2015/751
Supported
Interchange caps checked per transaction.
United Kingdom
UK
FCA CASS 15
Mandatory
Daily internal and external safeguarding reconciliation, with monthly returns.
PSRs 2017 · EMRs 2011
Mandatory
Safeguarding records and segregation of relevant funds.
Consumer Duty
Supported
Evidence of fair, timely refunds and payouts.
Türkiye
TR
Law No. 6493
Mandatory
Payment and e-money institutions: safeguarding and reconciliation of funds.
CBRT regulations
Mandatory
Reporting and record-keeping for payment services.
KVKK
Supported
Personal data handled within your permissions.
Schemes & audit
GLOBAL
Visa & Mastercard rules
Mandatory
Settlement, fee and dispute rules checked per scheme release.
Mastercard QMR · Visa GOC
Mandatory
Quarterly scheme reports built from reconciled clearing data.
SOX 404
Supported
Approvals, segregation of duties and control evidence.
SOC 2 · ISO 27001
Supported
Security controls with exportable evidence.
Source
The file, line and system behind every number.
Rule version
Which rule matched it, and which version was live.
Decision & approver
Who approved what, with four-eyes where required.
Export
One click to a regulator- and auditor-ready pack.
People in control
Data protection
Stored and processed in the EU.
EU hosting
Production data is stored and processed in EU data centres.
Encryption
Data is encrypted in transit and at rest.
Access control
Single sign-on, role-based permissions and multi-factor authentication.
Retention & deletion
Retention periods set per data type, with deletion on request.
Controls
Approvals, permissions and limits.
Deterministic matching
The same data and rules always give the same result.
Four-eyes approvals
Thresholds and segregation of duties enforced per flow.
Governed AI
AI suggestions are checked against your rules, and people approve what matters.
Read-only connectors
Valurec only uses the systems, data and permissions each flow requires.
Most common
Managed cloud
Fully managed by Valurec in EU data centres. The fastest way to go live.
✓
Hosted in the EU
✓
Updates and monitoring included
✓
Live in about two weeks
Dedicated
Private cloud
A single-tenant environment for your institution, in the region you choose.
✓
Isolated infrastructure
✓
Region of your choice
✓
Your own encryption keys
Self-hosted
On-premise
Deployed inside your own infrastructure, for the strictest data residency rules.
✓
Data never leaves your network
✓
Runs in your data centre or VPC
✓
Supported by our team
AI Manifesto
01
AI prepares matches, explanations and fixes. Anything that moves money or changes your books needs a person to approve it.
02
Every AI suggestion is checked against your matching rules and tolerances before it reaches you.
03
Each explanation links to the records, rule and variance behind it.
04
Your transactions are never used to train models for other customers.
05
Suggestions, approvals and overrides are logged in the audit trail with model and rule versions.
06
Switch AI features on or off per flow, and set the thresholds for Auto-Pilot yourself.
