Security

Written for advisor compliance teams. Ask us for the data agreement before onboarding any client list.

• All traffic is HTTPS (TLS 1.2+) at the edge (Cloudflare) and end to end.
• Application and database run on private infrastructure reachable only through an authenticated edge proxy; the database is not exposed to the internet.
• Client lists are stored encrypted at rest on the host volume; access is limited to the two founders.
• Logins use single-use emailed links (no passwords stored). Sessions expire after 30 days.
• We store only what the product needs: email, name, the sponsors you watch, and the alerts we generated. No account numbers, no SSNs.
• Public-record data (SEC EDGAR) is public; your watchlist is private and never shared or sold.
• Nightly backups, retained 30 days. Deletion on request within 7 days.

Questions or a data agreement: david@partnerfacts.com.