Cybersecurity

Cybersecurity you can count on

We earn your trust by protecting your data, identity, and assets.

See Security Guarantee

We stay ahead so you stay protected

With a dedicated team of security professionals and constantly evolving tech, we don’t just react to threats — we anticipate them.

  • Innovation that outsmarts threats.

    Technology Innovation Lab

    Constantly evolving defenses to premept tomorrow’s threats today.

  • See how we leverage AI to keep you safe.

    Artificial intelligence 

    Watch how we use AI to enhance the speed and precision of our security.

    Watch now
  • Proven controls. Clean report. Year after year.

    Independent audits

    Trusted third-party experts audit and validate our security.

  • Malicious traffic identified and blocked.

    Client protection program

    Strengthened by real-time fraud analysis and trusted industry partners.

Putting your trust and security first

Hear directly from our Chief Information Security Officer, Doug Peterson, on the people, process, and technology that keep you secure.

Watch now

Protecting what matters most

Strong cybersecurity safeguards, trusted encryption, and a firm commitment to protect your data and privacy.

  • Protecting your data is our first priority

    Our systems are built with cybersecurity at the core. We constantly evolve to stay ahead of threats. 

  • Verifying it’s really you

    We use multifactor authentication to reduce the chance of account takeover.

  • Encryption you can count on

    Your data is encrypted with AES-256 multifactor key management, including user specific keys and salts to keep it safe.

  • We do not sell your data

    We never sell your participants’ data. Our business is built on protecting your privacy, not profiting from it.4

  • We store all your data in the United States

    Your data is stored here — safeguarded by U.S. privacy and security laws.

Our security framework: Innovation and vigilance

  • A modern cloud-based technology platform we own and manage
  • An unqualified, clean, comprehensive annual SOC 2 Type II report with no exceptions
  • DOL cybersecurity best practices met or exceeded
  • Verizon Cyber Risk Program certified + PEN testing
  • Policies aligned to NIST 800-53, NIST CSF, and other leading industry standards
  • Continuous audits in a highly regulated environment (SEC, FINRA, DOL, DOI, DOB)
Independently audited, comprehensive SOC 2 Type II report - clean

Our Empower Security Guarantee

Participants are automatically enrolled in our Security Guarantee — with no cap to reimbursements, nor eligibility requirements.

See Security Guarantee