The Wealth Pool (TWP) does not store your bank and brokerage login credentials. We have partnered with ENVESTNET | Yodlee to safely manage these institutional connections. After the one-time setup (for each institution), your credentials are only stored at Yodlee, not in TWP’s database.
TWP uses bank-grade, multi-layered security to protect your information and data:
Our application runs on a private, dedicated server with 24/7 monitoring by our hosting provider.
We employ both a physical hardware firewall as well as an electronic web application firewall (WAF).
We regularly run anti-virus scans on our application server as well as our marketing websites.
Our hosting environment has both redundant power and internet networking systems.
We use 128-bit secure socket layer technology (SSL) and secure server communications in the form of HTTPS.
When you establish connection to your financial institution(s), your data and information is encrypted in transit (between your computer and TWP) and at rest (on the application servers at TWP) through SHA-256 encryption.
When you provide us with your bank credentials, you are only authorizing read-only access for your account. This means that TWP cannot be used to transfer or withdraw money.
If you are inactive for an extended period of time we automatically log you out to prevent unauthorized account access.
At minimum, we require passwords to be at least 8 characters long with at least one uppercase letter, lowercase letter, number, and special character.