SECURITY & TRUST
SECURITY & TRUST
Your clients trust your advice. We protect everything
they trust you with.
Your clients trust your advice. We protect everything
they trust you with.
Your clients trust your advice. We protect everything
they trust you with.
Your clients trust your advice. We protect everything
they trust you with.
Advice is a business of trust. WealthStream protects your firm's data
and your clients' data with strict controls for encryption, access, and
compliance.
Advice is a business of trust. WealthStream protects your firm's data and your clients' data with strict controls for encryption, access, and compliance.
Advice is a business of trust. WealthStream protects your firm's data and your clients' data with strict controls for encryption, access, and compliance.
Advice is a business of trust. WealthStream protects your firm's data and your clients' data with strict controls for encryption, access, and compliance.
SECURITY & TRUST
Your clients trust your advice. We protect everything they trust you with.
Advice is a business of trust. WealthStream protects your firm's data
and your clients' data with strict controls for encryption, access, and
compliance.
SECURITY & TRUST
Your clients trust your advice. We protect everything
they trust you with.
Advice is a business of trust. WealthStream protects your firm's data
and your clients' data with strict controls for encryption, access, and
compliance.
SOC 2 Type II audited
SOC 2 Type II audited
Encrypted in transit and at rest
Encrypted in transit and at rest
Never used to train AI models
Never used to train AI models
SSO and MFA for every user
SSO and MFA for every user
COMPLIANCE
COMPLIANCE
COMPLIANCE
We hold ourselves to the standards your
regulators expect.
We hold ourselves to the standards your
regulators expect.
We hold ourselves to the standards your
regulators expect.
We hold ourselves to the standards your
regulators expect.
We hold ourselves to the standards your
regulators expect.
Independent auditors test our controls. We build our program for firms that answer to regulators, and we document how every control works.
Independent auditors test our controls. We build our program for firms that answer to regulators, and we document how every control works.
Independent auditors test our controls. We build our program for firms that answer to regulators, and we document how every control works.
SOC 2 Type II
SOC 2 Type II
SOC 2 Type II
An independent auditor tests our controls for security, availability, and confidentiality over time, not at one point.
An independent auditor tests our controls for security, availability, and confidentiality over time, not at one point.
Encryption everywhere
Encryption everywhere
Encryption everywhere
TLS 1.2 or higher protects data in transit. AES-256 protects data at rest. Firms that need more control can hold their own keys.
TLS 1.2 or higher protects data in transit. AES-256 protects data at rest. Firms that need more control can hold their own keys.
Books & records
Books & records
Books & records
We keep complete, tamper-evident records that support your SEC and FINRA recordkeeping and exam duties.
We keep complete, tamper-evident records that support your SEC and FINRA recordkeeping and exam duties.
TRUSTED DATA STORAGE
TRUSTED DATA STORAGE
Your data stays yours.
Your data stays yours.
Your data stays yours.
Your data stays yours.
Your data stays yours.
Your client data is the record of years of trust. We isolate it, keep it in the United States, and never use it to train AI models.
Your client data is the record of years of trust. We isolate it, keep it in the United States, and never use it to train AI models.
Your client data is the record of years of trust. We isolate it, keep it in the United States, and never use it to train AI models.
Firm-level isolation
Firm-level isolation
Firm-level isolation
We isolate each firm’s data at the tenant level. No firm can see the data, strategies, or philosophy of another firm.
We isolate each firm’s data at the tenant level. No firm can see the data, strategies, or philosophy of another firm.
We isolate each firm’s data at the tenant level. No firm can see the data, strategies, or philosophy of another firm.
US data residency
US data residency
US data residency
We store and process all customer data in US data centers. Your data does not leave the country.
We store and process all customer data in US data centers. Your data does not leave the country.
We store and process all customer data in US data centers. Your data does not leave the country.
No model training on your data
No model training on your data
No model training on your data
We run AI models in our own secure cloud environment. The model provider does not receive, store, or train on your prompts or outputs. WealthStream does not use your data to train or fine-tune any model.
We run AI models in our own secure cloud environment. The model provider does not receive, store, or train on your prompts or outputs. WealthStream does not use your data to train or fine-tune any model.
We run AI models in our own secure cloud environment. The model provider does not receive, store, or train on your prompts or outputs. WealthStream does not use your data to train or fine-tune any model.
FIDUCIARY-GRADE SECURITY
FIDUCIARY-GRADE SECURITY
Built for firms that act in their clients’ best
interest.
Built for firms that act in their clients’ best
interest.
Built for firms that act in their clients’ best
interest.
Built for firms that act in their clients’ best
interest.
Zero trust by design
Zero trust by design
Zero trust by design
No user or system gets trust by default. We verify, limit, and log every request for access.
No user or system gets trust by default. We verify, limit, and log every request for access.
No user or system gets trust by default. We verify, limit, and log every request for access.
Your approval comes first
Your approval comes first
Your approval comes first
Our engineers can access your data only with written approval from your firm, and only for a specific support request.
Our engineers can access your data only with written approval from your firm, and only for a specific support request.
Our engineers can access your data only with written approval from your firm, and only for a specific support request.
Independent testing
Independent testing
Independent testing
Third-party experts run penetration tests on the full platform twice each year. We assume a breach can occur, and we design our defenses for that.
Third-party experts run penetration tests on the full platform twice each year. We assume a breach can occur, and we design our defenses for that.
Third-party experts run penetration tests on the full platform twice each year. We assume a breach can occur, and we design our defenses for that.
Proven infrastructure
Proven infrastructure
Proven infrastructure
We build on enterprise cloud infrastructure with managed identity and AI services. The largest banks and asset managers trust the same infrastructure.
We build on enterprise cloud infrastructure with managed identity and AI services. The largest banks and asset managers trust the same infrastructure.
We build on enterprise cloud infrastructure with managed identity and AI services. The largest banks and asset managers trust the same infrastructure.
FULL OWNERSHIP
FULL OWNERSHIP
You control your data at all times.
You control your data at all times.
You control your data at all times.
You control your data at all times.
WealthStream supports standard single sign-on protocols, so your firm controls who gets access. You decide how long we keep data, who holds the keys, and who sees what.
WealthStream supports standard single sign-on protocols, so your firm controls who gets access. You decide how long we keep data, who holds the keys, and who sees what.
WealthStream supports standard single sign-on protocols, so your firm controls who gets access. You decide how long we keep data, who holds the keys, and who sees what.
Data retention
Data retention
Data retention
Set retention periods that match your policies and your regulatory duties.
Set retention periods that match your policies and your regulatory duties.
Access visibility
Access visibility
Access visibility
Audit logs show who accessed which client record, and when. Your compliance team can export them for review.
Audit logs show who accessed which client record, and when. Your compliance team can export them for review.
Your own keys
Your own keys
Your own keys
Bring your own encryption keys through a managed key service. Revoke a key, and your data cannot be read.
Bring your own encryption keys through a managed key service. Revoke a key, and your data cannot be read.
SSO and MFA
SSO and MFA
SSO and MFA
Connect your identity provider through SAML 2.0 or OpenID Connect. Require multi-factor authentication for every user.
Connect your identity provider through SAML 2.0 or OpenID Connect. Require multi-factor authentication for every user.
TRANSPARENT BY DESIGN
TRANSPARENT BY DESIGN
Clients do not care if their advisor is
fast. They care if their advisor is good.
Good advice starts with trust.
Clients do not care if their advisor is
fast. They care if their advisor is good.
Good advice starts with trust.
Clients do not care if their advisor is fast. They care if their advisor is good. Good advice starts with trust.
Clients do not care if their advisor is
fast. They care if their advisor is good.
Good advice starts with trust.
Every WealthStream recommendation shows its reasoning and its sources. The advisor makes the decision. Your compliance team can see why each recommendation appeared.
Every WealthStream recommendation shows its reasoning and its sources. The advisor makes the decision. Your compliance team can see why each recommendation appeared.
Every WealthStream recommendation shows its reasoning and its sources. The advisor makes the decision. Your compliance team can see why each recommendation appeared.
FAQ
FAQ
Questions your
CISO will ask.
Questions your
CISO will ask.
Questions your CISO will ask.
Questions your
CISO will ask.
Questions your
CISO will ask.
Need our SOC 2 report, security questionnaire, or subprocessor list? Ask your WealthStream contact or visit the Trust Center.
Need our SOC 2 report, security questionnaire, or subprocessor list? Ask your WealthStream contact or visit the Trust Center.
Need our SOC 2 report, security questionnaire, or subprocessor list? Ask your WealthStream contact or visit the Trust Center.
How does WealthStream encrypt data?
How does WealthStream encrypt data?
How does WealthStream encrypt data?
We encrypt all data in transit with TLS 1.2 or higher. We encrypt all data at rest with AES-256. Firms that need more control can manage their own keys.
We encrypt all data in transit with TLS 1.2 or higher. We encrypt all data at rest with AES-256. Firms that need more control can manage their own keys.
We encrypt all data in transit with TLS 1.2 or higher. We encrypt all data at rest with AES-256. Firms that need more control can manage their own keys.
Who can see our client data?
Who can see our client data?
Who can see our client data?
Only the users your firm authorizes. WealthStream staff do not access your data without your written consent.
Only the users your firm authorizes. WealthStream staff do not access your data without your written consent.
Only the users your firm authorizes. WealthStream staff do not access your data without your written consent.
How do you make AI recommendations explainable?
How do you make AI recommendations explainable?
How do you make AI recommendations explainable?
Each recommendation links to the client facts, planning strategies, and firm philosophy that produced it. Advisors review the reasoning before they act. Nothing goes to a client without advisor approval.
Each recommendation links to the client facts, planning strategies, and firm philosophy that produced it. Advisors review the reasoning before they act. Nothing goes to a client without advisor approval.
Each recommendation links to the client facts, planning strategies, and firm philosophy that produced it. Advisors review the reasoning before they act. Nothing goes to a client without advisor approval.
What happens if there is a security incident?
What happens if there is a security incident?
What happens if there is a security incident?
We follow a tested incident response plan. We notify affected firms within 72 hours, so you can meet your own notice duties.
We follow a tested incident response plan. We notify affected firms within 72 hours, so you can meet your own notice duties.
We follow a tested incident response plan. We notify affected firms within 72 hours, so you can meet your own notice duties.
What happens to our data if we leave?
What happens to our data if we leave?
What happens to our data if we leave?
You can export all of your data first. When your contract ends, we permanently delete your data and all storage for your account, and we confirm this in writing.
You can export all of your data first. When your contract ends, we permanently delete your data and all storage for your account, and we confirm this in writing.
You can export all of your data first. When your contract ends, we permanently delete your data and all storage for your account, and we confirm this in writing.
Serious about your clients’ trust?
Serious about your clients’ trust?
Serious about your clients’ trust?
Serious about your clients’ trust?
See how WealthStream protects your firm, your advisors, and your clients.
See how WealthStream protects your firm, your advisors, and your clients.
See how WealthStream protects your firm, your advisors, and your clients.
Contact Us
© 2026 WealthStream. All rights reserved.
Contact Us
© 2026 WealthStream. All rights reserved.
Contact Us
© 2026 WealthStream. All rights reserved.
Contact Us
© 2026 WealthStream. All rights reserved.