Cloud banking platform
Security & compliance
The Mambu platform lives up to state of art security standards as
verified and assured by an external certification body.
How we do it
External pentests
Internal security tests are supported by external penetration tests from security researchers multiple times per year, which cover network security and the OWASP Top 10 common web application vulnerabilities.
Open & transparent
Our APIs and data dictionary are publicly available, and customers can automate back-up retrieval at any time. If you’re interested in detailed security assurance and compliance information, please contact our team.
Data security
We apply principles like security-in-depth, need-to-know and least-privilege to reduce the risk of security incidents caused by internal or external threats using different preventive, detective and mitigative controls.
Incident response
In the event of a security or risk-related incident, our team is prepared with comprehensive incident response plans and a 24/7 on-call staff to respond promptly and appropriately to mitigate the issue.
Infrastructure & regulation
SOC I & SOC II compliant
Mambu maintains Independent Service Auditor Reports SOC 1 (Type 1 & 2) and SOC 2 (Type 1 & 2) to provide assurance on the design, implementation, and operating effectiveness of the internal controls that are relevant to our customers’ financial statements (SOC 1) and internal controls that meet the AICPA Trust Services Security, Availability, and Confidentiality Principles and Criteria (SOC 2).
Secure
Customer data is processed in AWS' state-of-the-art data centres, assured by a vast amount of related certifications, providing confidence to run regulated workloads.
An AWS partner
We are a member of the AWS Partner Network in the Financial Services Competency program. Mambu was audited in the AWS Well Architected Program to ensure we deploy security best practices: encryption in transit and at rest, identity and access management, and many others available on the AWS platform.
ISO 27001 certified
Mambu maintains an Information Security Management System (ISMS) according to ISO/IEC 27001 to proactively manage information security risks and review the effectiveness of our technical and organisational controls via internal and external audits.
© Mambu 2026