How we protect your account
Financial data deserves careful handling. Here is how we treat your account and positions.
Positions are encrypted
Portfolio positions are encrypted at the column level in the database. Payloads are never written to application logs, so your holdings do not leak into observability tooling.
Deletion means deletion
When you delete your account, your positions and personal data are removed as part of the deletion path — not merely flagged inactive.
We do not sell your data
We do not sell personal data or positions to third parties. Your data is used to run the product for you, and nothing more.
Encryption in transit
All traffic is served over TLS. Credentials are handled by a managed identity provider; access tokens are kept out of browser local storage.
Managed cloud infrastructure
The service runs on managed AWS infrastructure with network isolation and least-privilege access to data stores. Raw source documents are stored in an immutable bucket.
Report an issue
If you believe you have found a vulnerability, email us and we will respond. We appreciate responsible disclosure.
Security questions or disclosures: security@fedreact.com
This page is informational and describes our current practices; it is not a certification or a contractual commitment. See the Terms and Privacy policy for the governing terms.