Skip to content
Security and confidentiality

Privacy and security program for financial data

Vestcrest operates with a documented privacy and security program. These four pillars support every report.

  • LFPDPPP privacy

    Full notice, purpose limitation, processor registry and ARCO procedure (access, rectification, cancellation and objection) under Mexican personal data law.

  • Security program

    Documented controls designed under SOC 2 Trust Service Criteria (Security and Confidentiality) and ISO 27001 good practices: access management, event logging, incident response and vendor assessment.

  • Access control

    Your report is delivered via personal link; it is not indexed in search engines. Data is not publicly readable: access restricted to authorized team and contracted infrastructure under contract.

  • Service scope

    Diagnostic and preparation for capital movements, sale, partner, financing or succession. Not a certified expert opinion or regulated intermediation: Transaction covers support in processes you initiate, within scope agreed in writing.

Controls operate since 2026-06-09. Type I readiness target July 2026; independent audit August 2026. No SOC 2 Type II certification yet, control design does not wait for an institutional client to request it.

NDA available on request · contacto@vestcrest.com · subject «NDA»

FAQ

Before you pay, these are the questions we hear most

Confidentiality

Price and plans

Process

Report formality

Partner entry

Capital and banking

Fuentes

Document your preparation for capital movements before the table

Book inspection · $499 USD

If your report does not identify specific prioritized gaps from your data, we redo the analysis at no cost.

View example report →

30-minute process · no sales calls · Privacy notice and full program