The Wealth Pool (TWP) does not store your bank and brokerage login credentials. We have partnered with ENVESTNET | Yodlee to safely manage these institutional connections. After the one-time setup (for each institution), your credentials are only stored at Yodlee, not in TWP’s database.
TWP uses bank-grade, multi-layered security to protect your information and data:
Secure Servers
Our application runs on a private, dedicated server with 24/7 monitoring by our hosting provider.
Firewalls
We employ both a physical hardware firewall as well as an electronic web application firewall (WAF).
Virus Protection
We regularly run anti-virus scans on our application server as well as our marketing websites.
System Redundancies
Our hosting environment has both redundant power and internet networking systems.
Secure Transmission
We use 128-bit secure socket layer technology (SSL) and secure server communications in the form of HTTPS.
Encryption
When you establish connection to your financial institution(s), your data and information is encrypted in transit (between your computer and TWP) and at rest (on the application servers at TWP) through SHA-256 encryption.
Read-Only
When you provide us with your bank credentials, you are only authorizing read-only access for your account. This means that TWP cannot be used to transfer or withdraw money.
Auto-logout
If you are inactive for an extended period of time we automatically log you out to prevent unauthorized account access.
Passwords
At minimum, we require passwords to be at least 8 characters long with at least one uppercase letter, lowercase letter, number, and special character.