Trust

Security and Responsible Disclosure

Effective September 18, 2026 · Pre-launch website notice

Ekava Nexus is building security controls for sensitive alternative-investment operations. The present website is a public preview, not a production document environment.

Current scope

The public website is delivered over HTTPS through managed cloud infrastructure. It does not currently represent a certified production environment and no SOC 2, ISO 27001, or other independent certification is claimed on this website.

Production control objectives

Before production onboarding, control verification is intended to cover identity and multi-factor authentication, least-privilege authorization, tenant isolation, encryption, secrets management, audit logging, change control, vulnerability management, backups, incident response, vendor risk, retention, secure deletion, and reviewer separation.

Client responsibility

Do not send credentials or sensitive financial records through ordinary email. Authorized users must protect access credentials, use approved channels, maintain accurate permission scopes, and promptly report suspected compromise.

Responsible disclosure

If you believe you found a security issue, email security@ekavanexus.com with the affected URL, reproducible steps, and potential impact. Do not access another person’s data, disrupt service, use destructive testing, exfiltrate information, or publicly disclose an issue before we have had a reasonable opportunity to investigate.

Assurance materials

Architecture, control evidence, subprocessors, testing results, recovery objectives, and contractual security commitments will be shared through an appropriate diligence process when they are available and applicable.