Protection for client financial data
How Nexus handles, stores, and safeguards the portfolio and communication data entrusted to it.
Security measures
Encryption in transit and at rest
Client portfolio data and communication drafts use AES-256 at rest. Data in transit uses TLS 1.3. Key management: per-tenant, rotated on scheduled basis.
No shared model training
Client data is never used to train any shared model. Your practice alone owns its voice profiles and draft data. Client information does not leave your tenant environment for training.
Draft audit log
Each generated, edited, or sent draft receives a log entry with its timestamp, data snapshot, and approving advisor identity. The audit log can be exported for compliance documentation.
Per-advisor access controls
Every advisor uses individual login credentials with role-based access. Practice administrators can inspect access logs, revoke credentials, and set which accounts may approve and send drafts.
Configurable data retention
Your practice sets the data retention period. At the period's end, data is purged automatically, helping your practice follow its own client data policies.
Japan data residency option
Practices that need data kept in Japan can select Japan-resident storage. Client portfolio data and drafts are processed and stored on Japan-located servers throughout their lifecycle.
For regulated advisory practices
Nexus Advisors addresses the data handling needs of regulated financial advisory practices. Nexus does not claim specific regulatory certification. The system is architected to support your firm's compliance documentation and internal review.
For practices operating in Japan, our handling is aligned with the Act on the Protection of Personal Information (APPI): data is collected only for defined purposes, retained no longer than necessary, protected against unauthorized access, and subject to individual access rights.
The audit log, per-advisor access controls, configurable retention, and Japan data residency option support documentation for independent advisory practices' internal compliance reviews.
We can explain our security architecture and provide documentation for your firm's due diligence. Contact us to arrange a security review session.
Questions on data handling?
A detailed security overview is available for practices conducting due diligence. Request the documentation or schedule a technical review session.