For a platform handling customer data from hundreds of financial institutions, ensuring that data is secured is non-negotiable. The harder part is keeping controls in place as the product evolves. New features, new products, and new data stores are added constantly at Alloy. Each one is a potential gap in visibility. Each one requires Lee's security team to verify that the existing controls still apply.
"As we built new features and new products, added new data stores, making sure that our controls were working was and is always a challenge," Lee said.
The traditional answer to this problem is manual. Wonder where the data is. Verify it's protected. Repeat with every release. That doesn't scale at fintech speed.