Resources

Sales Glossary Advisor Hub^NEW Knowledge Center

Your Security Is Our Mission

Poseidon is built from the ground up to protect sensitive financial data. AES-256 encrypted, regularly audited, and designed to meet the security demands of regulated industries.

Request Security Review View Compliance

FINRA

Compliant Logging

AES-256

Encryption at Rest & In Transit

99.9%

Uptime SLA

TLS 1.3

Transport Security

Data Protection

Your Data, Fully Protected

We treat your client data with the highest level of care. Multiple layers of protection ensure your information stays secure.

Encryption at Rest

All data is encrypted at rest using AES-256 encryption, the same standard used by major financial institutions and government agencies.

Encryption in Transit

All data transmitted between your browser and our servers is protected with TLS 1.3, preventing interception or tampering.

Data Isolation

Each customer's data is logically isolated with strict access controls. Your data is never commingled with other accounts.

Automated Backups

Continuous automated backups with point-in-time recovery. Your data is replicated across multiple availability zones.

Data Retention & Deletion

Clear data retention policies with full data deletion upon account termination. You maintain ownership of your data at all times.

Audit Logging

Every access to your data is logged with immutable audit trails. Know who accessed what data and when, exportable for compliance reviews.

Application Security

Secure by Design

Security is built into every layer of our platform, from authentication to code deployment.

Multi-Factor Authentication

MFA available for all accounts via Firebase Auth. Protect your team with an additional layer of verification beyond passwords.

Role-Based Access Control

Granular permissions let you control exactly who can access what. Compliance officers, advisors, and admins each get appropriate access levels.

Secure Development

Our engineering team follows OWASP best practices, with code reviews, static analysis, and dependency scanning on every release.

Penetration Testing

Regular third-party penetration tests by independent security firms. Vulnerabilities are triaged and remediated on strict SLAs.

Vulnerability Management

Continuous vulnerability scanning across our infrastructure and application stack. Critical issues are patched within 24 hours.

Incident Response

Documented incident response plan with defined escalation procedures. Customers are notified within 72 hours of any confirmed security incident.

Privacy & Compliance

Compliance Across Every Framework

We maintain compliance with the regulatory frameworks that matter most to financial advisors and their clients.

Regular Security Audits

We conduct regular third-party penetration testing and security assessments to continuously validate our security controls and identify areas for improvement.

GDPR

Full compliance with the EU General Data Protection Regulation. We offer Data Processing Agreements, support data subject rights, and maintain records of processing activities.

CCPA / CPRA

Compliant with the California Consumer Privacy Act and California Privacy Rights Act. Transparent data practices with opt-out mechanisms.

SEC Regulation S-P

Our platform helps RIAs meet the SEC's updated Regulation S-P requirements, including incident response programs and 30-day breach notification obligations effective June 2026.

FINRA Compliance

All prospecting activities are automatically logged and auditable per FINRA communication recordkeeping requirements. Immutable message archives for examinations.

SEC Marketing Rule

Built-in compliance with Rule 206(4)-1 for testimonials and endorsements. Approval workflows route content through compliance review before distribution.

For detailed information about our data practices, see our Privacy Policy and Terms of Service.

Security Documentation

Transparency You Can Trust

We believe in full transparency. Request access to our security documentation to support your due diligence process.

Security Assessment Report

Our latest third-party security assessment covering infrastructure, application security, and data protection controls.

Request Report

Security Whitepaper

Comprehensive overview of our security architecture, data handling practices, and compliance controls.

Request Whitepaper

Custom Security Review

Need answers to a security questionnaire or vendor assessment? Our team responds within 2 business days.

Contact Security Team

Security FAQ

Common questions about our security practices and data protection

Your data is stored in secure cloud infrastructure with data centers in the United States. All data is encrypted at rest using AES-256 encryption and replicated across multiple availability zones for redundancy.

We maintain a documented incident response plan with defined severity levels and escalation procedures. In the event of a confirmed security incident affecting your data, we will notify you within 72 hours and provide regular updates until resolution. This aligns with the SEC's updated Regulation S-P requirements.

Yes. We conduct regular penetration testing by independent security researchers and undergo periodic third-party security assessments. Summaries of these reports are available upon request.

Absolutely. You can export all of your data at any time in standard formats (CSV, JSON). Upon account termination, we will delete all of your data within 30 days, and you can request immediate deletion of specific data at any time.

Poseidon's platform includes built-in audit logging, data encryption, access controls, and incident response procedures that support compliance with the SEC's updated Regulation S-P. Our compliance team can walk you through how our controls map to specific regulatory requirements.

We support email/password authentication with multi-factor authentication (MFA) available for all accounts. Role-based access controls let compliance officers, advisors, and admins each operate with appropriate permission levels.

Contact us through the security documentation section on this page or reach out to our team at security@useposeidon.com. We typically respond to security questionnaires and assessment requests within 2 business days.

Ready to See Our Security in Action?

Schedule a security review with our team. We'll walk you through our controls and answer your security questionnaire.

Request Security Review Contact Security Team →

Request Security Review