Permissions - Fundmetric enables permission levels within the app to be set for your teammates. Permissions can be set to include the ability to edit or view constituent data
Password and Credentials - Credentials are stored using secure hash algorithms.
Uptime – Fundmetric has an uptime of 99.9% or higher.
NETWORK AND APPLICATION SECURITY
Data Hosting and Storage – Fundmetric is hosted in Toronto, Ontario Canada and in Montreal, Quebec, Canada. US customers are hosted in the Virginia Region of the United States.
Virtual Private Cloud - All of our servers are within our own virtual private cloud (VPC) with network access control lists that prevent unauthorized requests.
Encryption - All data sent to or from Fundmetric is encrypted in transit using 256 bit encryption.
Back Ups and Monitoring – Backups are weekly for all constituent data.
Permissions and Authentication - Fundmetric is served 100% over https. Access to constituent data is limited to authorized employees who require it for their job. Fundmetric runs a zero-trust corporate network. There are no corporate resources or additional privileges that come from being on Fundmetric’s network. We have Single Sign-on (SSO), 2-factor authentication (2FA) and strong password policies on tools used to build the Fundmetric platform to ensure access to cloud services are protected.
Incident Response – Fundmetric has a data breach protocol that is not publicly shared but that any customer can view upon request.
ADDITIONAL SECURITY FEATURES
Confidentiality - All Fundmetric employment contracts include a confidentiality agreement that must be signed and returned prior to commencing employment.
Training - Annual Security and Awareness training is completed by all Fundmetric employees.
Policies - Fundmetric has developed, and frequently update, a comprehensive set of security policies. These policies cover a wide-range of topics and are shared with all employees.
PCI Obligations - All payments made to Fundmetric are administered through our partner, Stripe. Details about their security setup and PCI compliance can be found at Stripe’s security page.