Security
Specific protections, described specifically.
Security claims are only meaningful when they name mechanisms. Here is what protects your account, what we will never ask for, and what you control.
Platform controls
What runs on our side.
Multi-factor authentication
A second factor is required for new devices and for sensitive changes such as adding a payee.
Encryption in transit and at rest
All sessions use encrypted transport and stored records are encrypted in the database layer.
Row-level data isolation
Account records are scoped to their owner by database policy, not only by application code.
Session and device management
Every active session is visible and can be revoked immediately.
Transaction monitoring
Card and payment activity is screened continuously and unusual patterns are flagged.
Administrative audit trail
Privileged actions are logged with actor, timestamp and affected record.
Rate limiting and lockout
Repeated failed sign-in attempts trigger throttling and temporary lockout.
Least-privilege access
Internal access is granted by role and reviewed; no shared administrative credentials.
Incident response
Documented procedures for containment, customer notification and recovery.
What we will never do
- Ask for your password or one-time passcode
- Ask you to move money to a “safe account”
- Ask for your full card number or PIN
- Ask you to install remote-access software
- Pressure you to act within minutes
What you can do today
- Turn on multi-factor authentication and keep it on
- Review active devices and revoke anything unfamiliar
- Set payment and card limits below your comfort threshold
- Freeze a card instantly if it is misplaced
- Report suspicious contact through secure messaging
If something looks wrong
Report it immediately — earlier is materially better.
Freeze the affected card from digital banking, then contact us on +1 (315) 000-0000. Keep any message or email you received; do not click further links in it.
Upstate Corporate is a fully licensed banking institution, authorised to accept deposits and provide credit, payment and wealth services. Licensing details are available to clients on request.
Liability for unauthorised transactions is assessed under the account terms and applicable regulation. Prompt reporting protects your position.
Questions about security?
Our team can walk through the controls on your account and help you tighten limits.