Enterprise-Grade Security
Your FX data is sensitive. We built HedgePoint with security at its core — from infrastructure to application to operations.
Encryption
AES-256 encryption at rest for all stored data. TLS 1.3 for all data in transit. Database-level encryption with AWS KMS managed keys.
Infrastructure
Hosted on AWS EU (Ireland) with redundant availability zones, automated failover, and DDoS protection via AWS Shield.
Application Security
OWASP Top 10 protections, input validation, CSRF protection, rate limiting, and content security policies enforced at every layer.
Authentication
Bcrypt password hashing, optional two-factor authentication, OAuth 2.0 social login, and session management with automatic expiry.
Data Isolation
Strict tenant-level data isolation in our multi-tenant architecture. Each organisation's data is logically separated with enforced access boundaries.
AI Data Handling
Documents processed via our AI parser are not used for model training. We use zero-retention API agreements with AI providers.
Audit & Compliance
Immutable audit logs for every action. Full GDPR compliance with DPA available. Regular internal security reviews and assessments.
Incident Response
Documented incident response plan with defined severity levels, escalation paths, and notification timelines. 48-hour breach notification.
Backup & Recovery
Automated daily backups with point-in-time recovery. Encrypted off-site backup storage. 99.9% uptime SLA with disaster recovery procedures.
Access Control
Role-based access control (RBAC) with admin, manager, and viewer roles. Principle of least privilege enforced across all platform functions.
Have security questions? Contact us at info@hedgepoint.app