Legal & Trust

Security

Last updated: 2026-07-29

Security is built into how SolVida (part of OptFin) is designed and operated. This page summarizes the practices we follow to protect your data and how to report a vulnerability.

Encryption

Data is encrypted in transit (TLS/HTTPS) and at rest in our storage services. Sensitive values are never stored in plaintext in application code.

Infrastructure

SolVida runs on Amazon Web Services (AWS), using managed services such as Amazon S3, Amazon RDS, and Amazon DynamoDB. We rely on AWS's physical and network security for the underlying cloud infrastructure and apply our own controls on top of it.

Access control

We follow the principle of least privilege: identities and services get only the access they need. Access is scoped by tenant and role, and grants are explicit rather than inherited.

Secrets management

Credentials, API keys, and other secrets are stored in AWS Secrets Manager and are never hardcoded in our source code or committed to our repositories.

Compliance gate on client-facing output

Output that goes to clients passes through a blocking compliance gate before it is sent, as an additional safeguard on what leaves the platform.

Responsible disclosure

If you believe you have found a security vulnerability, please report it privately to jose@pmafin.com. Please give us a reasonable amount of detail and time to investigate and remediate before any public disclosure. We appreciate good-faith reports and will work with you in good faith.

We describe only the controls we actually operate. SolVida does not currently claim any formal third-party certification (for example SOC 2 or ISO 27001). If and when such certifications are obtained, they will be stated here.

Contact

SolVida (part of OptFin). Security questions or reports: jose@pmafin.com.