Security measures
- Encryption of data in transit between your device and our servers
- Encryption of sensitive data at rest, where applicable
- OTP-based authentication for account access
- Role-based access controls limiting who can access your data internally
- Monitoring and logging of access to sensitive systems
- Secure handling of uploaded documents, including access-controlled storage
- An internal process for identifying and remediating vulnerabilities
- An incident-response process for suspected security incidents
We do not publish implementation-level infrastructure detail (e.g. specific credentials, internal network layout, or storage locations) on this page, as doing so would itself be a security risk.
Reporting a security issue
If you believe you've found a security vulnerability, please report it responsibly to contact@invowealth.com. Do not publicly disclose it before we've had a chance to investigate and remediate.