Everything you need to evaluate WealthY's security, privacy, and compliance posture.
Comprehensive overview of every technical and organizational control we implement.
Read whitepaper →The independent audit is planned and has not started, so no report exists yet. The underlying controls are implemented today and described in the security whitepaper.
Follows Type 1 by 6 to 12 months of operating history.
The privacy policy is published and says what we collect, which vendors receive it and where. The rest of the privacy program is being built.
What we collect, why, and your rights under PIPEDA.
Read policy →Our commitments as a technology provider to CIRO-regulated firms.
Read terms →How long we keep each category of data. Follows CIRO NI 31-103 and PIPEDA.
Read policy →Behavioural standards for everyone acting on behalf of WealthY.
Read code →How to report a security issue. Safe harbor for good-faith researchers. Acknowledgement within 3 business days.
Report a vulnerability →RFC 9116 machine-readable security contact information.
View security.txt →Whether the app, sign-in and data, and AI features are working right now, and uptime over the last 30 days. Checked every 10 minutes.
View status →Our template is under counsel review. Available to customers on request. Contact sales@wealthy.to.
Completed questionnaire responses are available on request. Contact sales@wealthy.to.