Security Is At The Heart Of Our Mortgage Process
Data protection is our priority when it comes to handling your data and personal information.
We always adhere to the highest industry standards for protecting your data, securing all of nesto’s online mortgage systems, and processing all transactions.
nesto is certified by recognized industry standards, including SOC 2 Type 2.
The nesto approach to security
Our full-time Security Team has a sole purpose:
ensuring that you and your data are protected around the clock.
We provide top-of-the-line mortgage services for Canadian consumers, as well as large financial institutions, through our nesto mortgage systems. Here’s why they trust us with their data:
We’re continuously updating our policies, procedures and controls across our entire organization to meet industry standards and ensure that nesto offers the highest level of security.
Our staff receives training and reminders on handling confidential data to help foster a security-conscious culture within the organization.
We employ stringent access control policies to ensure that only authorized personnel have access to confidential data based on their roles and responsibilities.
When using any of nesto’s online mortgage systems, nesto secures your data with best-in-class encryption. Data in transit is encrypted using TLS 1.2 or higher. All your personal data is encrypted at rest with AES-256.
The platform code is audited with automated static analysis software, tested, and manually peer-reviewed prior to being deployed to production. Additionally, we conduct security penetration tests on a yearly basis or whenever new features are introduced.
Our products are built on secured Google Cloud Platform Infrastructure, which means continually monitored for security vulnerabilities and updates are applied automatically.
Security Questions?
If you have any questions or concerns about the safety and security of your data, please email us at: security@nesto.ca. We’d be happy to chat!
Encountering cybersecurity events
Users may encounter cybersecurity vulnerabilities when using nesto systems. It is important to disclose these to our security team right away. Please be aware that we do not offer compensation for vulnerability disclosures.
Need to report a cybersecurity incident? Contact us at security@nesto.ca.
How does nesto protect my privacy?
For all questions concerning privacy and the use of your personal information, please refer to our Privacy Policy.