SECURITY
Your Trust Is Our Foundation
At InvestorCOM, protecting the confidentiality, integrity, and availability of client data is foundational to how our platform is designed and one of our core values.
Our solutions have grown in complexity and maturity, supporting applications such as RolloverAnalyzer, PeerCompare, and AccountCompare, This growth has been accompanied by continued investment in security controls, governance practices, and internal oversight.
InvestorCOM is SOC certified and meets the rigorous standards for data security, availability, and confidentiality validated by independent third-party audits.
InvestorCOM’s Security Control Framework
InvestorCOM maintains a layered security program designed to support regulated financial services environments and compliance-critical workflows.
Access Controls and Role-Based Permissions
Access to InvestorCOM systems is governed by user-based permission roles, ensuring individuals can only access the data and functionality appropriate to their responsibilities. This principle of least privilege supports internal governance and risk management.
SEC Rule 17a-4 – WORM Compliant
InvestorCOM supports Write Once, Read Many (WORM) – compliant data controls for applicable records, helping ensure that compliance-critical information is retained in a manner that is tamper-resistant and auditable.
Data Protection
Data is protected through encryption in transit and at rest, along with secure key-management and access-monitoring practices designed to reduce unauthorized access risk.
Monitoring and Operational Oversight
InvestorCOM maintains continuous monitoring, logging, and alerting processes to identify unusual activity and support timely investigation and response.
Independent Review and Ongoing Evaluation
In addition to SOC examinations, InvestorCOM conducts regular internal reviews and works with third-party specialists to assess vulnerabilities, operational processes, and control effectiveness.
A Commitment to Ongoing Security and Compliance
Security is not a one-time exercise. InvestorCOM continually evaluates and enhances its control environment as the platform evolves, regulations change, and customer needs grow.
Our approach emphasizes:
-
Ongoing control maintenance and review
-
Alignment with industry and regulatory expectations
-
Transparency to support customer due diligence