Security Practices

ALFRED™ is built and operated by Fintech Reimagined LLC with security treated as a foundational requirement. This page describes the practices ALFRED follows to protect information entrusted to the platform.

Infrastructure

ALFRED’s infrastructure is designed to protect data across storage, transmission, access, and platform activity.

Access to production systems is limited to authorized personnel and is logged where applicable. As ALFRED’s infrastructure continues to mature, this page may be updated to reflect additional hosting, monitoring, and security practices.

Data Encryption

Information transmitted to and from ALFRED is encrypted in transit.

ALFRED works with infrastructure and third-party providers that support secure data handling, including protection for sensitive user and business information.

Authentication & Access Control

ALFRED uses Auth0 to support authentication and account access.

Access to user accounts requires valid credentials. Administrative access to ALFRED systems is restricted on a least-privilege basis, meaning internal personnel may access only the information necessary to perform their assigned role.

Third-Party Security

Third-party providers connected to ALFRED, including Plaid, are selected with attention to their security and compliance standards.

ALFRED does not store third-party account credentials directly. Authentication with connected providers occurs through those providers’ secure systems.

Monitoring and Exception Handling

ALFRED monitors for anomalies, unauthorized access attempts, and unexpected system behavior.

When ALFRED detects a potential anomaly, unauthorized write attempt, policy conflict, or unexpected output, Safe Mode may be triggered. In Safe Mode, automated actions such as state advancement, partner transmission, or external file activity may be paused pending review.

Additional information about Safe Mode and auditability is available on the Trust & Compliance page.

Reporting a Security Concern

If you believe you have identified a security vulnerability or concern involving ALFRED, contact Fintech Reimagined LLC at the email below.