How we handle your data & privacy

What to know

We handle your data in accordance with the highest standards of privacy and security, and security informs all aspects of our product and infrastructure at Gain.pro

Our 6 pillars of security

1. Encryption: We encrypt all sensitive data both at rest and in-transit using robust, industry-leading encryption algorithms
2. Network security: Our production services run in an isolated Virtual Private Cloud on Google Cloud Platform. Only network protocols essential for making our service work are open at the network's perimeter
3. Access controls: Access to internal systems requires multiple authentication factors, including VPN access and device-based authentication tokens
4. Independent testing: We conduct rigorous annual penetration tests with world-class independent security consulting firms
5. Uptime and durability: We save daily encrypted backups for 30 days to ensure your data is safe and secure, and store them redundantly across multiple availability zones. We use third-party monitoring services to track Gain.pro's availability and have engineers on-call to rapidly investigate and address any outages
6. Audit logs: Any access to customer data in cases when customers need our assistance is exhaustively logged and regularly audited. No data is accessed unless we cannot provide support to our customers without doing so

Transparency and security

Gain.pro is audited annually as part of SOC 2 compliance to attest to the excellence of our controls in the domain of security, demonstrating our commitment to regulatory and industry standards. If you’d like a copy, please reach out to security@gain.pro or your Customer Success Manager.

We generally aim to store the minimum required level of data in order to enable our platform without comprising your privacy.

For users of the web or mobile application, this includes personal data as part of the service we offer to customers.

You can view full details of the personal data we collect to deliver our service linked in our privacy policy here.