Security & privacy

Security worthy of your clients' life savings.

You hold your clients' financial lives. We built Advisor Terminal to protect that, with bank-grade encryption, SOC 2 Type II infrastructure hosted in Canada, and privacy and compliance designed in from the first line of code.

Encrypted in transitEncrypted at restAES-256 encryptionSOC 2 Type IIIndependently auditedHosted in CanadaTwo-factor authenticationRole-based access controlRow-level securityLeast-privilege accessAutomatic session sign-outFull audit trailRedundant backupsOff-site backup copiesEncrypted backupsPoint-in-time recoveryFull data export, anytimeNever sold, never mined100% independent

The foundations

Six layers, working together.

Security here is not a setting you turn on. It is how the whole platform is built, from the infrastructure up.

Encryption Everywhere

Encrypted in transit with TLS and at rest with AES-256. Your clients' data is unreadable to anyone without the keys, end to end.

SOC 2 Type II

Built on SOC 2 Type II compliant infrastructure, independently audited against the highest standards for security and availability.

Hosted In Canada

Your data is stored and encrypted in Canada and never moved offshore. Canadian data, on Canadian soil.

Strict Access Control

Two-factor authentication for every user, role-based permissions, and row-level security so people see only what you allow.

Full Audit Trail

Every action is logged and timestamped. Nothing happens in your practice without a record of who did what, and when.

Redundant Backups

Continuous, encrypted backups with redundancy and recovery, so your records are never one failure away from gone.

Defense in depth

Two-factor and access control

Encryption · TLS and AES-256

Data segmentation and privacy

SOC 2 Type II infrastructure

Encrypted backups, in Canada

Your clients' data

Defense in depth

Your data, wrapped in security layers.

No single safeguard is ever enough for a client's financial life, so we layer them. Access is gated by two-factor authentication and role-based permissions. Everything is encrypted in transit and at rest.

It all runs on independently audited SOC 2 Type II infrastructure, backed up and encrypted in Canada. To reach your clients' data, every layer has to hold. They do.

Privacy, compliance & retention

We know the rules. We built them into our foundation.

This is a regulated profession, and the platform treats it that way. Privacy, record-keeping and compliance are designed in, not patched on.

Canadian Privacy Law

Built around PIPEDA and Canadian privacy law. Your clients' personal information is collected, used and stored the way Canadian regulation requires.

Records Retention

Keep the records you are required to. Notes, documents and history are retained for the seven years the industry expects, and archived records stay searchable and restorable.

Regulatory-Ready

Disclosure tracking in Meeting Notes, compliant file storage, and a complete audit trail mean you are ready the moment compliance asks.

You Own Your Data

Portable, exportable, never sold and never mined. No contracts with dealers or custodians. If you ever leave, your practice leaves with you. If you ever move, your practice moves with you.

We didn't add security. We started with it.

We know exactly what we are holding: the financial lives of real families, and the trust your clients place in you to protect them. That is not something you secure as an afterthought.

So security, privacy and compliance are not features on this platform. They are the foundation everything else is built on, because we know the industry, and we know what it costs to get this wrong.