App-maintained security and policy hub

Vestrix Finance Trust Center

This page is maintained by Vestrix Finance to answer common security, privacy, and compliance questions about the platform. It is not an independent certification or legal opinion.

Security and compliance are shared responsibilities: Vestrix Finance operates the platform controls listed below, while users are responsible for protecting their own credentials, devices, and wallet addresses.

Security controls

How we protect the platform.

The controls below reflect the practices currently implemented in the Vestrix Finance application. They are designed to reduce risk, but no system can guarantee absolute security.

Encrypted data

TLS in transit and encrypted database storage for sensitive records.

Row-Level Security

Database policies enforce per-user data boundaries at the query layer.

Role-based access

Admin actions are restricted to verified roles and logged for review.

Approval workflows

Deposits, withdrawals, and plan purchases require admin review.

Audit logging

Key user and administrator actions are recorded for accountability.

24/7 monitoring

Infrastructure and transaction patterns are monitored continuously.

Compliance & legal

Operating responsibly.

We describe our current compliance practices below. The legal and regulatory status of crypto investment services varies by jurisdiction; users should confirm that the platform is appropriate for their location.

KYC / AML

Identity verification is required during onboarding and for large activity, in line with standard anti-money-laundering practices.

SOC 2 aligned controls

Our access, change-management, and logging practices are designed to align with SOC 2 principles, though we do not claim a formal SOC 2 certification unless separately verified.

Regulatory cooperation

We cooperate with lawful requests from regulators and law enforcement, and may freeze or report accounts when required by law.

Data & privacy

What we collect and why.

We collect account information (name, email, phone, country, identity documents), wallet addresses, transaction data, and device/usage information necessary to operate the platform and satisfy legal obligations.

  • We do not sell personal information to third parties.
  • We use service providers for hosting, authentication, analytics, and market data.
  • Data is retained as long as needed for operations, legal compliance, and dispute resolution.
  • Users may request access, correction, or deletion of their data where applicable by law.

Privacy requests

To exercise your privacy rights, or to ask questions about how we handle your data, contact us at:

privacy@vestrixfinance.com

We will respond within the timeframe required by applicable law. Requests may require identity verification before action can be taken.

Report an issue

Security and incident contact.

If you discover a vulnerability or notice suspicious activity on your account, please report it immediately. We investigate all reports and respond to validated issues as quickly as possible.