Security
Privacy is part of security.
We publish our standards, never our procedures. Vault locations, routing, staffing patterns and access mechanics are not disclosed — to anyone outside the relationship.
Physical
Custody of the object
Layered perimeters
Multiple independently controlled zones between the street and a holding.
Dual control
Two authorised individuals are required for any vault access event.
Continuous monitoring
Intrusion, environmental and access monitoring at all times.
Compartmentalisation
Staff knowledge is limited to what a role requires.
Fire and climate protection
Suppression and conservation-grade environmental control.
Recorded custody events
Deposits, inspections, movements and releases are all logged.
Digital
Custody of the record
Encryption
Encryption in transit and at rest for all client records and documents.
Two-factor authentication
Available on client and mandatory on administrator accounts.
Role-based permissions
Vault, finance, security, client and asset roles are separated.
Session timeout
Idle sessions expire automatically on every portal.
Login monitoring
Login alerts and a visible access history for each account.
Immutable audit trail
Administrators cannot silently erase financial or security history.
Backups & recovery
Regular backups with a documented disaster-recovery position.
Emergency controls
Accounts can be suspended, locked, frozen or placed under review.
We never publicly expose vault locations, security procedures, client information, credentials or private documents. Requests for such information are declined.
Speak with us