Security
Private, secure and safe by design
Fund data is among the most sensitive information a firm holds. Security is built into every layer of the Formulary platform and business operations, from encryption to independent audits.
01
Data isolation
Artificial intelligence capabilities run on synthetic datasets, so client data never contributes to model training, and each client operates in a segmented environment.
02
Multi-factor authentication
Account access requires multi-factor authentication and password policies designed to resist phishing, brute-force, credential stuffing and other account takeover attacks.
03
Encrypted infrastructure
AWS cryptographic services encrypt client data at rest and in transit across the infrastructure, with systems for certificate management, key rotation and secrets handling.
04
Audit trails
Every action generates a record, capturing the lifecycle of data and operations with an unbroken chain of attribution, so decisions stay traceable at a point in time and through time.
05
Access controls
Access rights mirror the legal and organizational structures of private markets, following the relationships between entities, funds and individuals and the role each person holds.
06
Data governance
Information security enforces least privilege and need-to-know access, with data classification setting permission levels and zero-trust principles verifying identity and intent at each interaction.
Our commitment to security
Trust is the foundation of our business and our number one value
Our clients entrust us with sensitive, high-value financial data that powers their operations, and we treat this responsibility as core to our mission.
We apply zero-trust architecture, encryption at rest and in transit, and relationship-based access controls across all systems. Our environment is continuously monitored for threats and anomalies.
We operate on segmented cloud infrastructure with automated security tooling and engage third-party auditors to validate our controls. Security is an ongoing discipline, and we built our program to exceed industry standards, not just meet them.
Independent audit
SOC 1 Type II and SOC 2 Type II certified. Reports are available upon request.
AI providers
Our commercial terms with Anthropic, OpenAI and Google mean they cannot train on or retain client data.
Cloud
The platform runs on AWS, Azure and Google Cloud, under enterprise agreements built for security and reliability.
