Security

Vestblock LLC uses layered controls to protect VestBlock accounts, records, and communications. Security work is continuous. No internet service can guarantee absolute protection.

Platform safeguards

• Encrypted connections, authenticated access, and role-based controls protect account and operational data.
• Public submissions are validated, rate-limited, and recorded to help prevent abuse, duplicate submissions, and unauthorized actions.
• Database access uses row-level controls, restricted privileged operations, and audit records for sensitive workflow changes.
• External actions, including outreach and provider routing, require defined eligibility, consent or approved business-contact handling, suppression checks, and delivery evidence.
• VestBlock keeps private records out of public social publishing and does not expose account credentials, full financial-account numbers, or Social Security numbers through public forms.

AI and provider boundaries

AI can organize information or propose a next step, but it cannot independently approve a lender decision, override permissions, or authorize external outreach. Approved providers receive only the information needed for their assigned function. Their services remain subject to their own security practices and terms.

Your role

Use a unique password, protect your device, and do not send passwords, full account numbers, or Social Security numbers through email or free-text forms. Review your account and participant-profile permissions. Tell us promptly if you suspect unauthorized access, a misdirected message, or a compromised account.

Report a concern

Send security reports to contact@vestblock.io with “VestBlock security report” in the subject. Include a clear description and a safe way to contact you. Do not include passwords, access tokens, or sensitive personal data in the report.

Privacy requests

For access, correction, deletion, or consent questions, see the Privacy Policy.