Security & Trust

Security, compliance & trust

Last updated August 2026

Credit unions operate in one of the most regulated corners of financial services. FindMyCU is built to meet that bar — so members can trust what they read, and credit unions can put their brand on it with confidence.

NCUA-sourced data

Every credit union profile is built from public National Credit Union Administration records. Regulated facts — charter number, insurance status, asset size, and membership figures — come straight from those filings and can't be edited by listing owners.

Federal insurance, verified

The “Federally insured by NCUA” badge is data-driven from the charter number, never self-attested. If it shows, the charter is on file — members can trust it at a glance.

Accurate disclosures

Rate tables carry standard APY/APR disclosure language automatically, and credit unions can publish their own rate, membership, and legal disclaimers so their profile meets the same standards as their website.

Data in transit & at rest

All traffic is served over HTTPS. Member and account data is stored with row-level security so each credit union sees only its own leads, and access is scoped by role.

How we source and verify listings

Directory content originates from public NCUA data and is enriched by credit unions that claim and manage their own listings. Claiming a listing requires verification that the person works at the credit union. Regulated figures stay locked to the official record; credit unions control their narrative content, rates, and disclosures.

Member data & privacy

When someone submits a membership-interest form, that lead is routed only to the credit union they asked to hear from, protected by row-level security. We never sell member data. Full details are in our Privacy Policy.

Disclosures & fair lending

Rate displays include standard APY/APR disclosure language, and credit unions can publish custom rate, membership, and legal disclaimers plus an Equal Housing Opportunity mark from their portal. This keeps member-facing information consistent with the credit union's own compliance standards.

Real-time integrations

Credit unions can pipe leads directly into their CRM or loan origination system through signed webhooks — every payload carries an HMAC-SHA256 signature so the receiving system can verify it came from FindMyCU and wasn't tampered with in transit.

Reporting a concern

Found something inaccurate in a listing, or have a security question? Reach us through our contact page and we'll respond promptly.