Security at Total Values

We understand that you're entrusting us with sensitive portfolio data. Security is foundational to everything we build.

Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.

Infrastructure Security

Our platform is hosted on Vercel's enterprise-grade infrastructure, which maintains SOC 2 Type II compliance.

Access Controls

Role-based access controls ensure users only access data they're authorized to view.

Regular Audits

We conduct regular security assessments and penetration testing by third-party firms.

Data Protection

Your portfolio data is isolated and protected with multiple layers of security controls.

Incident Response

We maintain a comprehensive incident response plan with 24/7 monitoring capabilities.

Our Security Commitments

At Total Values, we are committed to maintaining the highest standards of security for our platform and your data. Our security program is designed around industry best practices and regulatory requirements.

Data Handling

  • All sensitive data is encrypted both in transit and at rest
  • We implement strict data retention and deletion policies
  • Access to production data is limited and logged
  • We never share your portfolio data with third parties for marketing purposes

Platform Security

  • Multi-factor authentication (MFA) available for all accounts
  • Session management with automatic timeout
  • Regular security updates and patch management
  • Web application firewall (WAF) protection
  • DDoS mitigation and rate limiting

Compliance

We leverage infrastructure and practices that support regulatory compliance:

  • SOC 2 Type II: Our hosting infrastructure (Vercel) maintains SOC 2 Type II compliance, ensuring enterprise-grade security controls for data handling, availability, and confidentiality.
  • GDPR: We implement data protection measures aligned with GDPR requirements for EU users, including data minimization, purpose limitation, and user rights management.
  • CCPA: We support California Consumer Privacy Act requirements, providing California residents with transparency and control over their personal information.

Responsible Disclosure

We welcome responsible security research. If you believe you've found a security vulnerability in our platform, please report it to us through our contact form. We will acknowledge receipt within 48 hours and work with you to understand and address the issue promptly.

Questions?

For security-related inquiries, please contact us:

Total Values LLC
Get in Touch →