Security

Built by people who work with financial systems.

Interest rate risk models describe your institution's financial position. We treat that data accordingly, and we ask for as little of it as possible.

Your data

Public data to start: Your first model is built from your NCUA 5300 Call Report, which is already public.
No member-level data: VantageFi models balance-sheet account categories. It does not ask for member records.
Isolated by organization: Every request is scoped to your organization and institution. Other customers cannot see your models.

Two-factor authentication: Authenticator-app (TOTP) sign-in with recovery codes. Second-factor secrets are encrypted at rest.
Breached-password checks: New passwords are checked against known data breaches using a privacy-preserving lookup.
Sign-in protection: Rate limits on sign-in, password reset and registration slow down guessing attacks.
Sessions you can see: See where you are signed in, sign devices out, and have idle sessions end automatically.
Roles and seats: Owners invite members, control seats and remove access when someone leaves.

Encrypted in transit: All traffic uses HTTPS. Plain HTTP is redirected.
Nightly backups: The database is backed up every night, and restores are tested.
Audit trail: Billing, plan and administrative changes are recorded with who made them and when.
Payments via Stripe: Card details go directly to Stripe and never touch VantageFi servers.

We will answer your security questionnaire and walk your team through how VantageFi handles your data.

Start from your own 5300 data. 14-day free trial, no card required.