EventHorizonIQ

Security & Compliance

How we protect your data and meet institutional requirements.

Infrastructure

Hosting

Application hosted on Vercel (SOC 2 Type II certified). Edge functions in multiple regions for low-latency global access.

Database

Neon Postgres (SOC 2 Type II certified). Data encrypted at rest (AES-256) and in transit (TLS 1.3). Automated backups.

API Authentication

API keys are hashed before storage. Keys are transmitted only via HTTPS headers. Rate limiting enforced per key.

Payment Processing

Stripe handles all payment data (PCI DSS Level 1). EHIQ never sees or stores card numbers.

Data Handling

+
Data Sources: All sensor data is derived from public APIs (CBOE, FRED, CoinGecko, DefiLlama, Binance, SEC EDGAR). No proprietary user data is used in sensor calculations.
+
Immutable Ledger: Every sensor reading is written with a server-generated timestamp. No manual override. No retroactive edits. Full audit trail available.
+
Data Retention: Sensor readings are retained indefinitely. API access logs are retained for 90 days. Account data is deleted upon request.
+
Data Residency: Primary data stored in US-East (Neon). Application edge in multiple regions via Vercel. Institutional clients can request specific data residency requirements.

Compliance Roadmap

LIVETLS 1.3 encryption in transit
LIVEAES-256 encryption at rest (Neon)
LIVEPCI DSS Level 1 (via Stripe)
LIVEAPI key hashing + rate limiting
LIVEImmutable audit trail for all sensor readings
Q2 2026SOC 2 Type I audit (in progress)
Q3 2026Webhook delivery with HMAC signature verification
Q4 2026SOC 2 Type II certification

Institutional Requirements

For institutional clients ($150K+/year), we offer:

  • +Custom SLA with defined uptime guarantees and incident response times
  • +Dedicated API endpoints with higher rate limits (6,000+ req/min)
  • +Data residency options (US, EU)
  • +API key activity audit logs on request
  • +Direct engineering support via Slack/Teams
  • +Custom sensor development with dedicated validation

Questions about security, compliance, or institutional requirements?

eric@eventhorizoniq.comPricing →

EHIQ is an intelligence layer providing diagnostic observations, not investment advice. Security measures described reflect current state. Compliance certifications are subject to third-party audit timelines.

Security & Compliance | EventHorizonIQ