Tokenization security, privacy and compliance controls

Fundshing separates public asset pages from issuer/admin workflows, supports permissioned investor access, and documents deployment records for RWA token launches.

Enterprise-Grade Security

Security controls focus on the places tokenization can fail: account access, admin permissions, smart contract deployment, investor eligibility, and post-launch records.

Encryption & Secure Transport

Browser traffic uses HTTPS/TLS, while platform records are stored with access-controlled database policies and operational safeguards for issuer and investor data.

Multi-Factor Authentication

Admin and issuer workflows are separated from public investor pages, with session-based access controls and MFA-ready operating procedures for sensitive roles.

Smart Contract & Infrastructure Security

Token deployments are validated on testnet first, with contract verification records, deployment logs, and mainnet gating before production release.

KYC/AML Process Support

Investor access can be tied to KYC/KYB status, wallet whitelists, jurisdiction restrictions, and transfer checks for permissioned RWA offerings.

Legal & Regulatory Compliance

We maintain compliance alignment with applicable Romanian and EU frameworks, supporting Fundshing’s role as a technology and advisory platform.

EU Regulatory Positioning

Fundshing operates as a technology, advisory, and exposure service provider and does not present itself as a broker, custodian, or regulated execution venue.

Declared
Status: Declared

MiCA Alignment

Fundshing S.R.L. aligns its operating model with relevant EU crypto-asset and digital asset compliance expectations, while not acting as a CASP unless separately authorized.

Aligned
Status: Aligned

GDPR Compliance

Personal data is processed in line with GDPR principles, including lawful basis, data minimization, transparency, and data subject rights.

Compliant
Status: Compliant

Internal Security Governance

Structured internal controls support access management, data protection, operational resilience, and incident response processes.

Active
Status: Active

Compliance & Privacy

Fundshing operates through Fundshing S.R.L. (Romania, EU). We are committed to protecting personal data and aligning our operations with applicable legal requirements, including GDPR, relevant EU regulatory expectations, and appropriate security standards.

  • Only essential personal data is collected, such as account, contact, and relevant project information.
  • We do not directly handle or store investor funds, and KYC or AML files are typically managed by issuers or regulated partners where applicable.
  • Where data transfers outside the EEA are necessary, appropriate safeguards such as Standard Contractual Clauses may be used.
  • Users may have GDPR rights, including access, correction, erasure, restriction, portability, and objection, subject to applicable law.
  • We do not knowingly provide services to individuals who are not legally permitted to use the platform under applicable law.

For complete details, read our full Privacy Policy.

📧 Contact our privacy team: privacy@fundshing.com

Important Risk Disclosure

All commitments and project participation involve risk, including the potential loss of capital. Tokenized projects may involve risks related to liquidity, technology, counterparties, and changing legal or regulatory frameworks. Fundshing does not provide financial, legal, or investment advice. Always conduct independent due diligence and consult qualified advisers before making unknown commitments.

Security Questions?

Our compliance and security team is available to address questions about data protection, platform security, or regulatory matters.