SECURITY

What we’ve built

Everything here is built. Nothing here is planned. We update this page when we ship, not when we intend to.

WHAT WE DON'T TAKE

  • We don't collect your brokerage, bank, or investment account data
  • We store only what's needed to generate an observation
  • Nothing is stored until you've consented. The check is enforced in code, and it fails closed
  • We never sell your data

WHAT WE CAN'T DO

  • Read-only by design. Vestguard cannot move money, place a trade, or change anything at your institutions
  • We observe. We never recommend

HOW YOUR DATA IS SEPARATED

  • Every table is protected by database-level row isolation. No account can see another's data
  • The application connects with the narrowest permissions it needs, enforced at the database
  • An automated cross-account leak test has to pass before any change ships

HOW YOUR DATA IS PROTECTED

  • Encrypted in transit
  • Identifiers are pseudonymized where they're used internally
  • Every access is recorded
  • Your consent is recorded and versioned. You can see what you agreed to and when

HOW WE WORK

  • Credentials live in a secrets manager, never in code
  • Every code change is signed with a hardware key
  • Dependency and code scanning runs on every change

RECORD DATED AUG 06, 2026

Our principles →