Security is the foundation of the myVault platform — not a bolt-on feature. From the moment a receipt enters your vault to the moment a strategy is delivered, your data is isolated, encrypted, and continuously audited.
Encryption Standards
- 256-Bit AES Encryption — End-to-end data scrambling for every file and transaction, both in transit and at rest.
- TLS 1.2 or Higher — All data transmitted between your device and our servers is protected with industry-standard transport layer security.
Access Controls
- Multi-Factor Authentication (MFA) — Mandatory on every primary access credential. No account can be accessed without a second verification factor.
- Per-User Data Isolation — Complete tenant isolation ensures your ledger never touches another client's data.
- Role-Based Permissions — Access to client data is governed by role-based permissions, ensuring only authorized personnel can view sensitive information.
Encrypted Document Vault
Every myVault account includes a secure document vault with drag-and-drop file uploads. The vault maintains per-document access logs so you can track exactly who viewed your files and when.
Infrastructure & Compliance
- SOC 2 Type II Compliant — Independently audited security standards, renewed annually.
- Continuous Monitoring — 24/7 intrusion detection and automated anomaly response across the entire stack.
- Regular Security Audits — We conduct regular security audits and penetration testing to maintain our security posture.
Data Retention
We retain client financial records for the period required by applicable tax law (typically seven years from the date of filing). After that period, we securely delete or anonymize your data unless you request earlier deletion of non-required records.