DATE OF LAST UPDATE: MARCH 10, 2025

NETWORK SECURITY MEASURES

1. Value of Information:
   Information gathered by our members is limited within Finpace’s software applications. Most customer information is already publicly available. Should information regarding a customer or prospective customer be personally identifiable and require a heightened level of security measures, Finpace transfers the liability of security to its third-party vendors, like AWS and Docusign. Payment information of Finpace users is gathered securely using Stripe as payment processor.
   
   
2. Priority of Assets:
   Finpace prioritizes its member’s clientele first, its members second, and itself last in terms of protection and service priority.
   
   
3. Threat Identification:
   Third-party vendors maintain consistent and updated procedures for identifying, preventing, and correcting threats. Finpace also employs KYC metrics to ensure compliance with security standards in the advisory industry.
   
   
4. Vulnerability Identification:
   Rigorous testing is conducted 2–4 times annually on systems, tools, and plans to proactively protect members and their clientele.
   
   
5. Analysis of Existing Controls, Implementation of New Controls:
   Continuous scanning and updates ensure security protocols remain robust. If current measures are inadequate, new controls are implemented promptly.
   
   
6. Impact of Various Scenarios:
   Testing includes assessing the likelihood and potential impact of negative events to safeguard members, their clients, and the business.
   
   
7. Risks and Their Priority:
   Corrective measures are in place for potential threats, with quick assessment and amendments to prevent future occurrences. Sensitive information collection is limited to reduce risks.
   
   
8. Reports on Risk Assessment:
   Recent risk prevention reports are delivered as available. Past reports can be requested by emailing tech@finpace.com with the subject “Risk Assessment Request.”

‍