Security
Authentication, encryption and access controls.
- Production traffic is encrypted using TLS 1.2 or higher.
- Passwords are securely salted and hashed and are never stored in plaintext.
- Access sessions are short-lived and can be revoked following security-sensitive events.
- Private portfolio, client, proposal, workspace, and brokerage data is protected by resource-level authorization.
- Administrative privileges do not automatically provide ownership of customer data.
- Security-sensitive activity is logged, and the application is subject to ongoing security review and automated testing.
Data Hosting
EU infrastructure and backups.
- Genesis Risk Monitor infrastructure is hosted with Hetzner.
- Production infrastructure is located in EU-based data centers.
- Production data is backed up automatically on a regular schedule.
- Backup access is restricted to authorized personnel.
Brokerage Connections
Read-only brokerage access through SnapTrade.
- Brokerage connectivity is provided through SnapTrade.
- Brokerage integrations are read-only.
- Genesis Risk Monitor may retrieve supported balances, holdings, positions, and account activity.
- Genesis Risk Monitor cannot place trades, transfer funds, or change brokerage account settings.
- Genesis Risk Monitor does not store users' brokerage usernames or passwords.
- Connection secrets required by the integration are encrypted at rest.
Payments
Card and billing details stay with our payment provider.
- Payments are handled by the payment provider.
- Genesis Risk Monitor does not store full credit-card or bank-account details.
- Only billing and subscription information required to operate the account is retained.
Data Ownership & Deletion
Portfolio and client data stay under your account.
- Portfolio and client information remains associated with the customer's account.
- Customers can permanently delete their account from account settings.
- Account deletion revokes active sessions, cancels an active subscription where applicable, and removes the account and associated customer data from the active application.
Privacy
How customer information is handled.
We process personal and portfolio information only as required to operate Genesis Risk Monitor and provide the functionality requested by our users.
Need more information?
If your firm is reviewing Genesis Risk Monitor as a technology provider and needs additional security, privacy, infrastructure, data-handling, subprocessor, or vendor due-diligence information, contact us.