Security & Compliance

S
e
c
u
r
e
,

C
o
m
p
l
i
a
n
t
,

B
u
i
l
t

o
n

T
r
u
s
t

Claims data is personal data. CFX is fully compliant with the Personal Data Protection Act (PDPA) and CIS IT Security Standards, so every claim we handle is protected end to end — from first notification through to final settlement.

Security is built into how we work, not added afterwards: hardened platforms, controlled access, and a secure development lifecycle that keeps our operations audit-ready.

PDPA Compliant
CIS Controls
OWASP Aligned

Our Commitment

C
o
m
p
l
i
a
n
c
e

&

S
e
c
u
r
i
t
y

C
o
m
m
i
t
m
e
n
t

PDPA Compliant

We comply with the Personal Data Protection Act to safeguard personal data and privacy at every step of the claims journey — collection, processing, storage and disposal.

CIS IT Security Standards

We follow CIS Controls to establish a strong security foundation across people, processes and technology, benchmarked against a recognised international standard.

How We Build

S
e
c
u
r
e

S
o
f
t
w
a
r
e

D
e
v
e
l
o
p
m
e
n
t

OWASP ASVS

Application security aligned with the OWASP Application Security Verification Standard.

OWASP Top 10

Protection against the most critical and prevalent web application risks.

Secure Coding Practices

Built using the OWASP Secure Coding Practices, reviewed at every release.

Secure SDLC

Follows CIS secure software development lifecycle principles end to end.

Security Testing

SAST, DAST, vulnerability assessment and penetration testing best practices.

S
e
c
u
r
e
,

C
o
m
p
l
i
a
n
t
,

B
u
i
l
t

o
n

T
r
u
s
t

C
o
m
p
l
i
a
n
c
e

&

S
e
c
u
r
i
t
y

C
o
m
m
i
t
m
e
n
t

PDPA Compliant

CIS IT Security Standards

S
e
c
u
r
e

S
o
f
t
w
a
r
e

D
e
v
e
l
o
p
m
e
n
t

OWASP ASVS

OWASP Top 10

Secure Coding Practices

Secure SDLC

Security Testing

Y
o
u
r

t
r
u
s
t

i
s

o
u
r

p
r
i
o
r
i
t
y
.

Our Services

Security & Compliance

Secure, Compliant, Built on Trust

Compliance & Security Commitment

PDPA Compliant

CIS IT Security Standards

Secure Software Development

OWASP ASVS

OWASP Top 10

Secure Coding Practices

Secure SDLC

Security Testing

Your trust is our priority.

Our Services

S
e
c
u
r
e
,

C
o
m
p
l
i
a
n
t
,

B
u
i
l
t

o
n

T
r
u
s
t

C
o
m
p
l
i
a
n
c
e

&

S
e
c
u
r
i
t
y

C
o
m
m
i
t
m
e
n
t

S
e
c
u
r
e

S
o
f
t
w
a
r
e

D
e
v
e
l
o
p
m
e
n
t

Y
o
u
r

t
r
u
s
t

i
s

o
u
r

p
r
i
o
r
i
t
y
.