S
Sanctuary
Wealth
Client Security Overview
Your accounts and data are protected by a security program built exclusively for financial services.
We partner with FCI — a managed cybersecurity firm with more than 30 years serving financial firms — to maintain continuous security controls across our entire practice. This document explains what is in place to protect your information, how it is monitored, and what happens if something goes wrong.
01
Devices and connections secured
Every device used to access your accounts is protected, encrypted, and monitored — whether in the office, at home, or on the go.
02
Identity verified at every access point
Multi-factor authentication and Zero Trust controls ensure that only authorized individuals and devices can reach sensitive systems and data.
03
Monitored around the clock
FCI's security operations center watches our environment 24 hours a day, 7 days a week — detecting and containing threats before they reach you.
Our commitment
"We do not wait for an incident to take security seriously. The controls protecting your data are active, enforced, and verified every day — not assembled after the fact."
What protects your data
FCI enforces a layered set of controls across every device and connection in our practice. These safeguards run continuously and are designed to require minimal action from our team or yours to remain effective.
- Endpoint protection and detection on every device that touches client data
- Full-disk encryption so data on lost or stolen devices stays inaccessible
- Always-On VPN and multi-factor authentication for every access point
- Cloud application hardening and data loss prevention controls
- Off-site and off-line backup with tested recovery procedures
- Encrypted connectivity across all remote and office environments
How we stay accountable
Security that cannot be verified provides little assurance. FCI provides continuous monitoring, evidence of control operation, and independent assessments so our program can be audited — and so we can demonstrate to you that it works.
- 24x7 SOC monitoring with real-time alerting and incident documentation
- Annual network penetration testing and vulnerability assessments
- SOC 2 Type 1 attestation from FCI as our cybersecurity provider
- Proof of cybersecurity insurance coverage maintained by FCI
- FINRA, SEC, and NYDFS cybersecurity regulation alignment reporting
- Forensic analysis and evidence preservation in the event of an incident
About our cybersecurity partner
fcicyber.comFCI
30+
years serving financial services exclusively
40,000+
endpoints under active management
24x7
security operations center coverage
SOC 2
Type 1 attestation
100%
Security assessment rating
