s90

Home / Compliance / GLBA (client financial privacy)

For financial institutions that hold client information

Compliance: GLBARegulated

Proof you protect the client information you hold.

The Gramm-Leach-Bliley Act requires financial institutions to protect the personal information of the people they serve, and it counts tax preparers as financial institutions. Compliance: GLBA gives you quarterly evidence that your safeguards are in place and working, so you can show it to a client, an insurer or a regulator.

A steel file cabinet with its top drawer locked and a small key in the lock, in soft morning light.

At a glance

Package
Compliance: GLBA
Evidence
Compliance Posture Report, quarterly
Stacks on
Complete IT: Managed or Co-Managed

Does this apply to you?

It likely applies if your firm is one of these:

What the rule asks for, and what you receive.

  1. 01

    Protect the security and confidentiality of customer information

    Encryption in storage and in transit, and access controls

    Evidence that client information is protected in storage and in transit

  2. 02

    Guard against anticipated threats

    The safeguards your security program describes, kept running

    Records of the safeguards your security program describes

  3. 03

    Prevent unauthorized access that could harm customers

    Regular access reviews

    Access reviews showing who can reach client records

We provide the evidence. You decide.

s90 does

  • Runs the controls the framework calls for
  • Keeps the documentation current
  • Delivers a Compliance Posture Report every quarter

You decide

  • Whether the evidence meets your obligations
  • Which open gaps to close first
  • Whether your firm is compliant

The Compliance Posture Report

Scoped to GLBA, delivered every quarter without asking. The proof in your hands is never more than three months old.

Get the sample Compliance Posture Report by email

Sample · Compliance Posture Report

ACME Corp · Quarter 3 · GLBA

Evidence that client information is protected in storage and in transit
Enforced
Records of the safeguards your security program describes
Current
Access reviews showing who can reach client records
Current

Sample report for a fictional business. Example figures.

Other frameworks you may answer to.

Bundle discounts available.

Low-rise office buildings with tile roofs among oaks and palms in the south Orange County foothills, with Saddleback Mountain in the morning haze beyond.
s90

One question to ask yourself

If a client or a regulator asked tomorrow, could your firm show how their information is protected?

Up to$500,000Cyber WarrantyBacked by Cork Inc.

In 30 minutes, we talk through your setup and you leave knowing which plan fits.

Book a call

See exactly what you'd receive each quarter, by email.

Get the sample Posture Report by email