Meridian Alpha

Records

FindingsActionsValidationsEvidenceTestsControlsMonitoring
39 evidence
As of 9 Oct 2026
Filtered byApplication: Meridian Customer Portal ✕Severity: Medium ✕
EvidenceTitleControlSource systemCollectedStatus
ITGC-REQ-020GitHub: Branch protection on default branchesCHG-017 Oct 2026Accepted
ITGC-REQ-021GitHub: Merged PRs approved by non-authorCHG-016 Oct 2026Accepted
ITGC-REQ-022Meridian Customer Portal: Deployed build traces to approved PRCHG-01Meridian Customer Portal5 Oct 2026Accepted
ITGC-REQ-033Meridian Customer Portal: Activated accounts linked to approved caseKYC-01Meridian Customer Portal6 Oct 2026Under review
Q2-EV-016GitHub Enterprise Cloud · policy document (Q2)CHG-01GitHub Enterprise Cloud11 Jun 2026Accepted
Q2-EV-017Meridian Customer Portal · screenshot (Q2)CHG-01Meridian Customer Portal16 Jun 2026Rejected
Q2-EV-024Amazon Web Services (ap-south-1) · ticket sample (Q2)LOG-01Amazon Web Services (ap-south-1)3 Jun 2026Rejected
Q2-EV-025Microsoft Entra ID · access review (Q2)LOG-01Microsoft Entra ID8 Jun 2026Rejected
Q2-EV-030Amazon Web Services (ap-south-1) · system export (Q2)ENC-01Amazon Web Services (ap-south-1)9 Jun 2026Accepted
Q2-EV-031Meridian Customer Portal · configuration report (Q2)ENC-01Meridian Customer Portal14 Jun 2026Accepted
Q2-EV-035PayGate Payment Gateway · access review (Q2)VEN-03PayGate Payment Gateway10 Jun 2026Accepted
Q2-EV-036Meridian Customer Portal · policy document (Q2)VEN-03Meridian Customer Portal15 Jun 2026Accepted
Q2-EV-037Salesforce (Sales + Financial Services Cloud) · policy document (Q2)KYC-01Salesforce (Sales + Financial Services Cloud)20 Jun 2026Accepted
Q2-EV-038Meridian Customer Portal · screenshot (Q2)KYC-01Meridian Customer Portal25 Jun 2026Accepted
Q2-EV-039PayGate Payment Gateway · system export (Q2)PAY-01PayGate Payment Gateway6 Jun 2026Rejected
Q2-EV-040Meridian Customer Portal · configuration report (Q2)PAY-01Meridian Customer Portal11 Jun 2026Rejected
Q2-EV-042Meridian Customer Portal · ticket sample (Q2)GOV-01Meridian Customer Portal21 Jun 2026Accepted
RBI-REQ-001Meridian Customer Portal: ITSC minutes uploaded for quarterGOV-01Meridian Customer Portal9 Oct 2026Accepted
RBI-REQ-013GitHub: Branch protection on default branchesCHG-019 Oct 2026Accepted
RBI-REQ-014GitHub: Merged PRs approved by non-authorCHG-018 Oct 2026Accepted
RBI-REQ-015Meridian Customer Portal: Deployed build traces to approved PRCHG-01Meridian Customer Portal7 Oct 2026Accepted
RBI-REQ-018AWS: CloudTrail organisation trail enabledLOG-017 Oct 2026Under review
RBI-REQ-030PayGate: Provider API keys rotated after incidentVEN-037 Oct 2026Accepted
RBI-REQ-031Meridian Customer Portal: Payment webhook signatures validVEN-03Meridian Customer Portal6 Oct 2026Accepted
RBI-REQ-032Salesforce: Approved onboarding cases have complete KYC checklistKYC-016 Oct 2026Accepted
RBI-REQ-033Meridian Customer Portal: Activated accounts linked to approved caseKYC-01Meridian Customer Portal5 Oct 2026Accepted
RBI-REQ-035PayGate: mTLS enforced on payout APIPAY-014 Oct 2026Accepted
RBI-REQ-036Meridian Customer Portal: Payment initiation requires 2FAPAY-01Meridian Customer Portal9 Oct 2026Accepted
SOC2-REQ-019GitHub: Branch protection on default branchesCHG-019 Oct 2026Accepted
SOC2-REQ-020GitHub: Merged PRs approved by non-authorCHG-018 Oct 2026Accepted
SOC2-REQ-021Meridian Customer Portal: Deployed build traces to approved PRCHG-01Meridian Customer Portal7 Oct 2026Accepted
SOC2-REQ-028AWS: CloudTrail organisation trail enabledLOG-015 Oct 2026Accepted
SOC2-REQ-029Microsoft Entra ID: Entra diagnostic logs streamed to SIEMLOG-01Microsoft Entra ID4 Oct 2026Accepted
SOC2-REQ-030Meridian Customer Portal: Portal audit events received in last 24hLOG-01Meridian Customer Portal9 Oct 2026Accepted
SOC2-REQ-035AWS: RDS and S3 encryption enabledENC-018 Oct 2026Accepted
SOC2-REQ-036Meridian Customer Portal: TLS configuration on portal endpointsENC-01Meridian Customer Portal7 Oct 2026Accepted
SOC2-REQ-040PayGate: Provider API keys rotated after incidentVEN-035 Oct 2026Rejected
SOC2-REQ-041Meridian Customer Portal: Payment webhook signatures validVEN-03Meridian Customer Portal4 Oct 2026Under review
SOC2-REQ-045Meridian Customer Portal: ITSC minutes uploaded for quarterGOV-01Meridian Customer Portal8 Oct 2026Under review