Security

The portal runs on established, professionally managed cloud infrastructure hosted in the United States. We do not operate our own servers or store your documents on personal devices. Access to the underlying systems is limited to what is required to run the service.

Every connection to the portal is encrypted in transit using industry standard TLS — the same protection your bank uses. Your information and documents are also encrypted at rest in our providers’ storage systems.

Your workspace is isolated at the database level. Access is enforced by row-level security, so one client can never see another client’s information — the boundary is built into the system, not just the screens you see. In practice, your documents are visible to you and your Harvest Gate advisory team, and no one else.

Files you upload are kept in private storage that is never publicly accessible. When you download a document, we generate a short-lived, single-purpose link that expires shortly after it is created. There is no public URL to your files.

The portal is invitation-only — accounts are created by Harvest Gate, not opened to the public. Each account is protected by your own password. Please choose a strong, unique password and keep it private; if you ever believe your account has been compromised, contact your advisor immediately and we will help you secure it.

We retain your information for as long as your engagement with us is active and for a reasonable period afterward to meet our records and legal obligations. You may request a copy of your information, or ask us to delete it, at any time — just reach out to your advisor.

If you notice anything that looks wrong, or have a question about how your information is handled, tell us right away. You can message your advisor from inside the portal or email info@harvestgateadvisory.com.