Security Information (FAQs, Platform Data, Policies, Disaster Recovery)

TABLE OF CONTENTS

• Where is my platform hosted?
• What happens to my data if I stop using the platform?
• What happens to my platform if WB no longer provides support?
• Do I have access to front-end code?
• What is your data and security policy?
• What is your disaster recovery process?
• Has WealthBlock performed a SOC Audit?

Where is my platform hosted?

AWS (Amazon Web Services) 

What happens to my data if I stop using the platform?

We work with you to package the data in an agreed standard format and provide access to the data through a secured channel.

What happens to my platform if WB no longer provides support?

In the event that WealthBlock can no longer service the platform, we will maintain a copy of the platform source code in an escrow account and assign an escrow agent to continue providing hosting service to all existing clients. 

For the continued service, clients shall pay a subscription fee negotiated in good faith between WealthBlock and clients before Source Code Escrow Service commences.

Do I have access to front-end code?

You don't have access to the front end source code. However, within the offer builder, there's an option to customize each page using an HTML module.

What is your data and security policy?

Our data and security policies are embedded in our privacy policy. 

• WB privacy policy
• WB terms
  • Any extremely sensitive information like driver's licenses for KYC is passed through to our providers and never stored by us. 
  • Any personally identifying information (i.e. PII) that we must store (e.g. user's name, phone, address, etc.) is encrypted in our database. 
  • All offer documents are stored in private and secure Amazon S3 (simple storage service) buckets. 
  • Access to any and all information within the platform are gated by user roles and privileges, ensuring that only those with the proper authorization can view them. 

To obtain a copy of our official Platform Security Overview, please submit a ticket through the Support Portal.

What is your disaster recovery process?

We back up all of our web and database servers nightly. 

Our servers are load balanced. So should one go down, all requests are immediately routed to an available server. 

The only issue that would bring down the entire environment for an extended period is if a region of the Amazon cloud itself were down entirely.

All documents are also stored in secure Amazon S3 buckets that are backed up and replicated by Amazon across several regions.

Has WealthBlock performed a SOC Audit?

WealthBlock has yet to conduct its own SOC audit, but for built-in integrations where sensitive data is concerned, we leverage trusted providers that have done so. Please see below:

• AWS: https://aws.amazon.com/compliance/soc-faqs/
• Mailchimp: https://mailchimp.com/about/security/soc-request/
• Onfido: https://onfido.com/security/