FinTech App Security Compliance Review

I have built two independent FinTech solutions that I plan to submit to the Bank of Jamaica’s regulatory Sandbox. Before I take that step, I need a fresh set of expert eyes to validate two things: 1. The overall security posture of each application. 2. Their alignment with Jamaican and international regulations covering Data Protection & Privacy, Anti-Money Laundering (AML), and Electronic Payments & Transactions. You will receive architecture diagrams, user flows, API documentation and direct access to a staging environment for both apps. I am specifically interested in whether my encryption strategy, authentication logic and general vulnerability surface meet current industry best practices (OWASP Top 10, ISO 27001, PCI DSS, etc.). On the compliance side, I want a clear gap analysis that maps each requirement in the above-mentioned regulations to the way the apps currently operate. Please be prepared to reference the Bank of Jamaica sandbox guidelines as you work. Experience with Caribbean or Commonwealth financial regulation is a big plus. Deliverables • A written report for each application that details: – Identified security weaknesses, their severity, and recommended remediation. – Compliance gaps with Data Protection & Privacy, AML, and Electronic Payments rules, plus concrete steps to close them. • A concise executive summary I can submit alongside my sandbox application. • (Optional but welcome) A brief follow-up call to walk through the findings. If this is firmly within your wheelhouse, let me know what additional information you need and how long the review would take.