Information Security Policy

Last updated: July 15, 2026

Protecting your account and information is central to how CITIZENTRUSTUNION operates. This policy summarizes the safeguards we use to protect the Services, and the steps you can take to help keep your own account secure.

1. Our Commitment to Security

We maintain administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of customer information and our systems, appropriate to the sensitivity of the data involved.

2. Authentication & Access Controls

• Login credentials — every account is protected by a username and password, with an additional identity-confirmation step at sign-in.
• Two-factor authentication — customers can enable an authenticator app (Google Authenticator) for an additional verification code when signing in and confirming transfers.
• Transaction PIN — a separate PIN is required to confirm transfers, payments, and other sensitive account actions, distinct from your login password.
• Least-privilege admin access — internal staff access to customer accounts is limited to what is needed to perform support and compliance functions, and administrative actions such as account access are logged separately from your own activity history.

3. Identity Verification (KYC)

We may require customers to submit identity and address verification documents ("KYC") before lifting certain account limits. Submitted documents are reviewed by authorized personnel and stored with restricted access controls.

4. Fraud & Activity Monitoring

We monitor account activity for signs of unauthorized access or unusual transaction patterns, and maintain an audit trail of sign-ins, transfers, and account changes to support fraud detection and investigation.

5. Data Protection in Transit & at Rest

We use encrypted connections for data transmitted between your browser and our servers, and apply access controls to data stored in our systems. Documents uploaded for verification purposes are only accessible to authorized reviewers.

6. Incident Response

Where we identify a security incident affecting customer accounts or information, we will investigate, take steps to contain and remediate the issue, and notify affected customers and relevant authorities as required by applicable law.

7. Your Role in Keeping Your Account Secure

• Use a strong, unique password for your account and avoid reusing it elsewhere.
• Enable two-factor authentication in Preference & Settings for an extra layer of protection.
• Never share your password, transaction PIN, or authenticator codes with anyone — we will never ask you for them.
• Check your Activity Log periodically and report anything you don't recognize right away.
• Be cautious of unexpected emails or messages asking you to click a link or provide account details, and confirm requests through your dashboard or by contacting us directly.

8. Reporting a Security Concern

If you notice suspicious activity on your account or believe your credentials may be compromised, contact us immediately using the details below, or reach out through the Support section of your dashboard so we can help secure your account.

9. Policy Review

We periodically review this policy to reflect changes in our practices, technology, and applicable regulatory requirements, and will update the "Last updated" date accordingly.

10. Contact Us