Personnel Security

We perform background checks on all new employees in accordance with local laws.  The background check includes employment verification and criminal checks for US employees.  

​

Identity and Access Management

All our employees have a unique login with access based on a least privilege model.

​

Encryption

Our laptops, desktops, and servers are managed, have encrypted hard drives and are monitored with Endpoint Detection and Response (EDR) and Artificial Intelligence (AI) based antivirus where possible.

​

We use both encryption in transit and encryption at rest to protect PII and non-public data from unauthorized access. All communications between users are encrypted in transit using Transport Layer Security (TLS). All database and database backups are encrypted at rest.

​

Access to Data

Access to client data is limited to authorized individuals who require it for their job.  There is no corporate resources or additional privileges from being on our network.  We run on a zero-trust corporate network.

​

Passwords

We enforce password complexity standards, leverage Multi-Factor Authentication where possible and employ a host of other best practices related to password management.​

​

Physical Security

Our office is secured by keycard access doors.  Entrances and exits are observed and captured by cameras and are monitored and protected.

​

Network Security

Our internal network has various defense in depth measure and practices the principle of zero trust via Secure Gateways.

​

Security Awareness

All our employees receive security awareness training upon hire and continues throughout the year.

​

Independent Assessments

Bi-annual cybersecurity assessments conducted by a vetted independent 3rd party industry expert.

 

 

 

Proactive Security Monitoring

Ongoing cybersecurity monitoring provided by 7Tech.

 

 

Cyber Insurance

Avid Wealth Partners maintains DataBreach SM Network And Information Security And Media Injury Liability coverage.

​

Incident Response

We have an in-depth Security Incident Response Plan (S-IRP) for handling security events which includes identification, containment, eradication, and recovery efforts.

​

Responsible Disclosure

If you believe you have discovered a vulnerability within Avid Wealth’s SaaS service, please submit a report to us by emailing incidentresponse@avidwp.com.

​

If you believe your account has been compromised, please report it to incidentresponse@avidwp.com.