Trust & Due Diligence Center
Wealthtender maintains a complete set of written information security, privacy, and business continuity policies, reviewed annually and available on request. This page is the source for compliance and infosec teams evaluating Wealthtender as a service provider.
Policy Library
All policies are versioned and reviewed at least annually. Selecting any item below opens a shared Google Drive folder where each document listed here is available individually as a PDF.
Security Posture
Independent Penetration Test & Vulnerability Assessment
Astra Security, CREST certified and CERT-In empanelled, using OWASP WSTG methodology. Conducted March 17 to April 8, 2026. Automated full scan plus manual penetration test. Zero critical and zero high findings, with all medium findings remediated and verified.
View live security posture →Hosting Infrastructure
WP Engine, which holds ISO/IEC 27001:2022 certification for its Information Security Management System and is SOC 2 compliant, with continuous vulnerability monitoring, edge protection, and multiple automated backups daily with point in time recovery.
Payment Processing
Handled entirely by Chargebee, a PCI-DSS Level 1 Service Provider and SOC 2 compliant platform. Wealthtender does not store payment card data.
Threat Monitoring
Weekly review of hosting provider vulnerability notifications with a proactive patch management program and documented remediation process.
Availability
99.5% uptime SLA. Planned maintenance windows are brief, under two minutes, and scheduled outside business hours.
Insurance Coverage
Cyber and Errors & Omissions coverage placed through Vouch. Certificates of insurance are available on request.
| Coverage Area | Limit | Notes |
|---|---|---|
| Policy Aggregate | $1,000,000 | United Specialty Insurance Company via Vouch |
| Network Security Liability | $1,000,000 | Per occurrence |
| Privacy Liability | $1,000,000 | Includes regulatory liability |
| Breach Response Costs | $500,000 | Includes rogue employee endorsement |
| Data Incident Restoration | $500,000 |
Common Due Diligence Questions
Need something not listed here?
Additional documentation, including certificates of insurance, third-party security rating reports, and completed due diligence questionnaires, is available on request. Brian Thorp, Wealthtender’s founder and CEO, is also available to join a call with your compliance or vendor management team.
Request Documentation Schedule a Call