--- title: "Security | Next Matter" description: "Enterprise-grade security at Next Matter - SOC 2, ISO 27001, SSO/SCIM, tenant isolation, encryption in transit and at rest, and data residency you control." lang: en json-ld: | [ { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://nextmatter.com/#organization", "name": "Next Matter", "legalName": "Daizy NM Limited", "url": "https://nextmatter.com", "logo": "https://nextmatter.com/__l5e/assets-v1/aab354c2-e169-46fe-8e9b-0e78438471d3/nextmatter-logo.svg", "description": "Next Matter is the orchestration platform for regulated financial operations - purpose-built for asset managers, fund administrators, and wealth and wealthtech firms, not a generic workflow tool - combining AI agents, your existing systems and human approvals with governance and a complete audit trail.", "sameAs": [ "https://www.linkedin.com/company/nextmatter", "https://www.daizy.com" ] }, { "@type": "WebSite", "@id": "https://nextmatter.com/#website", "url": "https://nextmatter.com", "name": "Next Matter", "publisher": { "@id": "https://nextmatter.com/#organization" }, "inLanguage": "en" } ] }, { "@context": "https://schema.org", "@graph": [ { "@type": "WebPage", "@id": "https://nextmatter.com/security#webpage", "url": "https://nextmatter.com/security", "name": "Security | Next Matter", "description": "Enterprise-grade security at Next Matter - SOC 2, ISO 27001, SSO/SCIM, tenant isolation, encryption in transit and at rest, and data residency you control.", "isPartOf": { "@id": "https://nextmatter.com/#website" }, "publisher": { "@id": "https://nextmatter.com/#organization" }, "inLanguage": "en" }, { "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://nextmatter.com" }, { "@type": "ListItem", "position": 2, "name": "Security", "item": "https://nextmatter.com/security" } ] }, { "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "How does Next Matter handle security and compliance?", "acceptedAnswer": { "@type": "Answer", "text": "Next Matter is built for regulated workflows, with governance, approvals and a complete audit trail over every automated and human action. See the security page for the current posture on data handling and compliance controls." } }, { "@type": "Question", "name": "Is every action auditable?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. Every step - AI, integration or human approval - is recorded, so operations are audit-ready by default rather than reconstructed after the fact." } } ] } ] } ] --- [![Next Matter Logo](/__l5e/assets-v1/aab354c2-e169-46fe-8e9b-0e78438471d3/nextmatter-logo.svg)](/) - [Solutions](/solutions) [ grid\_view Solutions Overview Personas, capabilities, and proof ](/solutions)[ smart\_toy AI Orchestration Coordinate agents across your stack ](/solutions/ai-orchestration)[ library\_books Workflow Library Remix production-ready workflows ](/remix) Case Studies [ ![Ocorian](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69a7f71677d8045f0f2da4e8_Ocorian_trustbar.svg) Ocorian 1,800 Employees • Fund Administrator ](/case-studies/ocorian)[ ![Trade Republic](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69a7f71677d8045f0f2da4e9_traderpublic_trustbar.svg) Trade Republic 10M Customers • Online Trading Platform ](/case-studies/trade-republic)[ ![b2Venture](/__l5e/assets-v1/40232f5e-b66d-45f6-8d04-8be40304d172/b2venture-logo.png) b2Venture $800mn AUM • Venture Capital Firm ](/case-studies/b2venture)[ ![Swan](/__l5e/assets-v1/ef4919d4-3042-430f-b1a2-10b7da14c889/swan-logo.webp#lh=1500x401) Swan BaaS leader • Embedded Banking Platform ](/case-studies/swan) - [Platform](/platform) [ hub Platform Overview Built for Fund Operations ](/platform)[ build Workflow Builder Build long-running orchestrations ](/workflow-builder)[ smart\_toy AI & Automation Agents, models and guardrails ](/ai-and-automation)[ extension Integrations Core Ledger & Ecosystem Connectivity ](/integrations)[ verified\_user Governance & Audit Approvals and a full audit trail ](/governance-and-audit)[ shield Security SOC 2, ISO 27001, data residency ](/security) - Resources [ forum Ask a Technical Question Chat with the docs AI assistant ](https://help.nextmatter.com/docs/integrate-across-tools?assistant)[ campaign Opinions Perspectives from our team ](/opinions) [Sign in](https://app.nextmatter.com/login) [Talk to us](/book-a-demo) shield\_lock Security # Security you can hand to your CISO on day one Certified, isolated and designed for regulated financial workloads - from tenant separation and encryption to SSO, SCIM and audit-ready evidence [Request our security pack](/book-a-demo) [Read privacy & security policy](/privacy-policy) Independently audited & certified [ ![AICPA SOC 2](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69a7f71677d8045f0f2da55f_logo_SOC2.svg) ](https://app.drata.com/trust/d62cb1a1-96df-4741-8058-97ecbc4ff345/)[ ![SOC 2 Type 2 (2025)](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69eb389eff4de1586e1d2f14_Daizy%20SOC%202%20Type%202.png) SOC 2 Type 2 ](https://app.drata.com/trust/d62cb1a1-96df-4741-8058-97ecbc4ff345/)[ ![GDPR compliant](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69a7f71677d8045f0f2da561_logo_GDPR.svg) ](https://app.drata.com/trust/d62cb1a1-96df-4741-8058-97ecbc4ff345/)[ ![Capterra 4.9 / 5](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69a7f71677d8045f0f2da560_logo_capterra.svg) ](https://www.capterra.com/)[ ![G2 Users Love Us](https://cdn.prod.website-files.com/68875dc226afb0a643320138/68875dc226afb0a643320839_G2-badge-users-love-us.png) G2 Users Love Us ](https://www.g2.com/) Platform pillars ## Six controls, one platform The controls your risk, legal and security teams ask for on day one - built into the platform, not bolted on. 01 verified\_user ### [SOC 2 Type II](https://app.drata.com/trust/d62cb1a1-96df-4741-8058-97ecbc4ff345/) & ISO 27001 Annual third-party audits with continuous control monitoring. Full reports and letters of attestation available under NDA. 02 lock ### Encryption everywhere TLS 1.2+ in transit and AES-256 at rest with per-tenant key isolation. Customer-managed keys available on enterprise plans. 03 key ### SSO, SCIM & RBAC SAML and OIDC single sign-on, SCIM 2.0 provisioning, and role-based access down to the workflow and step level. 04 dns ### Tenant isolation Logical isolation by default. Dedicated infrastructure available for regulated customers with strict segregation requirements. 05 public ### EU & US data residency Pick a region and processing is enforced end-to-end. GDPR-native by default, with a DPA and sub-processor list on request. 06 receipt\_long ### Audit & evidence Immutable audit logs, IP allow-listing, session controls and one-click evidence exports for regulator and internal audit. At a glance ## Technical specifications The short version reviewers ask for first. Full detail lives in the security pack below. Identity & access [SOC 2 Type II](https://app.drata.com/trust/d62cb1a1-96df-4741-8058-97ecbc4ff345/) controls, SAML/OIDC single sign-on, enforced multi-factor authentication. Governance controls Native maker-checker (dual authorization) enforced on execution steps. Audit capabilities Immutable, non-destructive event log ready for internal audit and regulator review. System orchestration Bi-directional REST and GraphQL APIs plus event-driven webhooks. External security Logically isolated, encrypted workspaces for partner and client interactions. Data handling Standardised encrypted payload handling and credential storage across the platform. The security pack ## Everything your review team needs, in one PDF Skip the six-week questionnaire loop. Our security pack is written for CISO, DPO and procurement reviewers - one download, one signature. [Request the pack](/book-a-demo) - check\_circle [SOC 2 Type II report](https://app.drata.com/trust/d62cb1a1-96df-4741-8058-97ecbc4ff345/) Latest audit period, under NDA. - check\_circle ISO 27001 certificate Current scope, issued by our third-party auditor. - check\_circle Penetration test summary Executive summary of the most recent third-party pen test. - check\_circle Sub-processor list & DPA GDPR-ready Data Processing Agreement and current sub-processors. - check\_circle Architecture & data-flow diagrams How tenant data moves through the platform and where it lives. ## Ready when your security team is Book a working session with our team - bring your questionnaire, leave with signed answers and a scoped pilot plan. [Book a demo](/book-a-demo) [Privacy & Security policy](/privacy-policy) ![Next Matter](/__l5e/assets-v1/aab354c2-e169-46fe-8e9b-0e78438471d3/nextmatter-logo.svg) The agentic operating system for modern financial services. A Daizy company. [](https://www.linkedin.com/company/nextmatter) Case studies - [Ocorian](/case-studies/ocorian) - [Trade Republic](/case-studies/trade-republic) - [Swan](/case-studies/swan) - [b2Venture](/case-studies/b2venture) - [All case studies](/case-studies) Solutions - [Solutions overview](/solutions) - [AI Orchestration](/solutions/ai-orchestration) - [Workflow library](/remix) Platform - [Platform overview](/platform) - [Workflow Builder](/workflow-builder) - [AI & Automation](/ai-and-automation) - [Integrations](/integrations) - [Governance & Audit](/governance-and-audit) - [Security](/security) - [System status](https://status.nextmatter.com/) Capabilities - [AI Financial Reporting](/ai-financial-reporting) - [Operational Intelligence](/operational-intelligence) - [Exception Handling](/exception-handling) - [Team Interfaces](/team-interfaces) - [Guest Interfaces](/guest-interfaces) - [Manager Dashboard](/manager-dashboard) - [Builder Toolbox](/builder-toolbox) Company - [About](/about) - [Careers](/careers) - [Opinions](/opinions) - [Answers](/answers) - [Documentation](https://help.nextmatter.com/docs/integrate-across-tools) - [Ask a Technical Question](https://help.nextmatter.com/docs/integrate-across-tools?assistant) Certified Secure [![AICPA SOC 2 for Service Organizations](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69a7f71677d8045f0f2da55f_logo_SOC2.svg)](https://app.drata.com/trust/d62cb1a1-96df-4741-8058-97ecbc4ff345/) [![GDPR compliant](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69a7f71677d8045f0f2da561_logo_GDPR.svg)](https://app.drata.com/trust/d62cb1a1-96df-4741-8058-97ecbc4ff345/) [![SOC 2 Type 2 compliant 2025](https://cdn.prod.website-files.com/69a7f71677d8045f0f2d982a/69eb389eff4de1586e1d2f14_Daizy%20SOC%202%20Type%202.png)](https://app.drata.com/trust/d62cb1a1-96df-4741-8058-97ecbc4ff345/) © 2026 Daizy NM Ltd. All rights reserved. A Daizy company [Terms of Service](/terms-of-service) [Privacy Policy](/privacy-policy) [Data Processing Agreement](/data-processing-agreement) Solutions - [Solutions Overview](/solutions) - [AI Orchestration](/solutions/ai-orchestration) - [Workflow Library](/remix) Case Studies - [Ocorian](/case-studies/ocorian) - [Trade Republic](/case-studies/trade-republic) - [b2Venture](/case-studies/b2venture) - [Swan](/case-studies/swan) Platform - [Platform Overview](/platform) - [Workflow Builder](/workflow-builder) - [AI & Automation](/ai-and-automation) - [Integrations](/integrations) - [Governance & Audit](/governance-and-audit) - [Security](/security) Resources - [Ask a Technical Question](https://help.nextmatter.com/docs/integrate-across-tools?assistant) - [Opinions](/opinions) [Sign in](https://app.nextmatter.com/login) [Talk to us](/book-a-demo)