What you need to know about using the myadvisor website.
SecurityWe understand that when you use myadvisor, you are entrusting us with one of your most valuable assets – the financial data of your company or client. We treat this responsibility very seriously. While we can’t publicise every detail of our security processes, we would like to provide a level of assurance by demonstrating a careful, pragmatic approach alongside some of the key tenets that we operate by.
#1 You own your dataWe are in essence ‘caretakers’, looking after your financial data, in order to provide a service. We ensure that you have the controls necessary to manage access to your data. When you delete a company that was imported from a cloud accounting system (eg. QuickBooks® Online), we also delete any associated access tokens ensuring we can no longer access your company data through the accounting provider’s API. If at any time you wish to remove a company from myadvisor, you can simply delete the company from within myadvisor. The data will exist in our offsite backup for a period of time and then be removed ensuring no data remains with myadvisor.
#2 Security is ongoingSecurity is not a ‘set-and-forget’ procedure for us. At myadvisor we are continuously evaluating and reinforcing our security approach through an internal documentation & review process. We also engage independent security specialists on a regular basis. An independent review by experienced security professionals provides a fresh set of eyes and keeps us up to date with the latest developments in the security industry.
#3 Availability is importantThe availability of your data is crucial to your use of myadvisor. We backup and encrypt your data (256-bit AES encryption) before moving it to a secure offsite location in a secondary data center. This means that, in the event of a disaster or an outage at our primary datacenter, we can recover quickly and continue to provide myadvisor from a geographically redundant secondary facility.
Hosting & Physical Securitymyadvisor is hosted on Amazon Web Services (AWS), a highly scalable cloud computing platform with end-to-end security and privacy features built in. Our team takes additional measures to maintain a secure infrastructure and application environment. For more specific details regarding AWS security, please refer to https://aws.amazon.com/security/
SSLSecure Socket Layer (SSL) is an encryption technology used to protect data as it travels over the internet. All myadvisor application communications are encrypted with 128-bit SSL, providing a level of encryption comparable to that used by banks and financial institutions.
User accessWithin each account, myadvisor provides for multiple levels of access to confidential customer data. You can invite or remove individual users from your account whenever you want. Selected myadvisor staff can also access your data, for support purposes only, and only when you provide permission.
PasswordsBest practices are used in the transmission and storage of passwords within myadvisor. All users must choose a strong password and an automatic lockout is enforced when incorrect passwords are incorrectly entered. If you are inactive for an extended period while still logged in to myadvisor, you will be automatically logged out.
Third party audits and inspectionsmyadvisor engages independent security specialists on a regular basis. Our third party audits provide penetration testing, network scanning and source code reviews.
Data protection & backupWe backup customer data every 12 hours. We also retain an encrypted copy of a daily backup in multiple geographic locations to aid in disaster recovery. Company-specific data is kept separate through logical separation at the data tier, based on application-level access permissions and roles.
How can you stay protected?Here are some simple steps you can take to stay protected:
- Create a password nobody can guess, so no dictionary words or family names. Be cryptic or use multi-word pass phrases – easy to remember, hard to crack.
- Don’t share your password with anybody.
- Don’t write your password on a sticky note and attach it to your computer.
- Keep your browser software up to date.