RFA
Security and trust center evidence
RFA is the first AI-native technology partner for finance: managed IT, cybersecurity, cloud, AI, and compliance for financial institutions
Summary
RFA has 1 registry-verified row and 3 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is GDPR: Vendor states GDPR on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
RFA states on its trust centre that it complies with GDPR, per the vendor's 21 Sep 2026 trust centre snapshot. RFA states on its trust centre that it holds UK Cyber Essentials, per the 21 Sep 2026 snapshot. RFA states on its trust centre that it has SOC 1, per the 21 Sep 2026 snapshot. RFA is listed in the EU-US Data Privacy Framework registry as of 17 Sep 2026, with active EU-US Certification and UK Extension Certification, originally issued 19 Jun 2019 and expiring 25 Feb 2027. No public evidence found for SOC 2, ISO/IEC 27001, or HIPAA for RFA as of 21 Sep 2026.
- GDPR: vendor states on its trust centre as of 21 Sep 2026 (self-reported, no registry evidence).
- UK Cyber Essentials and SOC 1: vendor states on its trust centre as of 21 Sep 2026 (self-reported).
- EU-US Data Privacy Framework: listed as active (EU-US, UK Extension) as of 17 Sep 2026, issued 19 Jun 2019, expires 25 Feb 2027.
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 22 Sep 2026; it is regenerated whenever a row changes.
Among business services vendors
1verified rows
Category median 0, across 147 indexed business services vendors. RFA has more verified rows than 67 percent of them.
cloud servicescompliancecybersecurityfinancial services itmanaged it services
Compliance grid
GDPRVendor-statedVendor states GDPR on its trust centre
as of 30 Sep 20262 sources
Cyber EssentialsVendor-statedVendor states UK Cyber Essentials on its trust centre
as of 30 Sep 20262 sources
SOC 1Vendor-statedVendor states SOC 1 on its trust centre
as of 30 Sep 20262 sources
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, UK Extension Certification
as of 2 Nov 20261 source
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026Cyber Essentials evidence addedA Cyber Essentials row entered the index with state Vendor-stated.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 1 evidence addedA SOC 1 row entered the index with state Vendor-stated.
Similar vendors with evidence
Related by product tags and the Business services category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
CSI
Security
CSI is a leading fintech, regtech and cybersecurity partner offering today's top
zyedge
Security
Trusted managed IT services & compliance partner delivering expert IT support, cybersecurity, and CMMC readiness for
Lumen21
Security
Managed IT, cybersecurity, Business Central ERP, and Microsoft 365 for
Abacus Information Technology
Security
Abacus is a managed IT and cybersecurity provider supporting financial services firms, hedge funds, private equity and healthcare
Evidence against regulations
All regulations for RFAHow much of each regulation’s vendor requirements RFA’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read