Trust & Compliance
How InvesTTable is built and hosted, and what that means for investor and company data.
InvesTTable runs on managed cloud infrastructure with EU-region data storage. Deployments go out through automated pipelines, so releases and rollbacks are quick. Availability depends on these providers: we do not operate our own data centres.
Traffic is encrypted in transit with TLS, and data is encrypted at rest by our database provider. Row-level security isolates company and investor records, so an account only reads the data its role and plan allow.
Public endpoints sit behind our hosting provider's edge protection and our own rate limiting, which slows brute-force attempts and resource exhaustion. Authentication routes are limited more strictly than general traffic.
InvesTTable holds no security certification today. We are not SOC 2 or ISO 27001 certified and do not claim to be. The architecture is built along ISO 27001 principles, a formal audit is on the roadmap, and we will publish the certificate here once it exists.
For security disclosures or compliance questions, contact hello@invest-table.com.