Security and access
Controlled access and account recovery
AlphaDesk uses authenticated accounts, password reset flows, signed Stripe webhooks, and role-aware application gating across paid and demo workspaces.
- +Environment-managed secrets. Production secrets are stored outside the repo and deployed through Render environment variables.
- +Transactional email via Postmark. Welcome, password, and pilot-intake flows use production email infrastructure.
- +Operational transparency. We are not representing a completed SOC 2 today. That work remains ahead of broad-scale rollout.
Reliability and operations
Production app hosted on managed infrastructure
The application and database run on managed services with monitored health endpoints, deploy workflows, backups, and explicit environment separation.
- +Managed Postgres. Production data lives in a Render-managed Postgres database under your control.
- +Health monitoring. The app exposes a live health endpoint used during deployment and operational checks.
- +Migration-backed schema changes. New features ship through explicit database migrations instead of ad hoc production edits.
Data handling
Built around real advisory operations
AlphaDesk already manages client records, portfolios, agreements, billing workflows, reporting, and audit-oriented activity trails. Pilot firms should still review their own data governance requirements carefully.
- +Demo and live separation. Shared sample data powers the demo workspace, while paid workspaces use database-backed firm data.
- +Alternative assets and reporting support. The product already supports private holdings and reporting surfaces that reflect real advisory complexity.
- +Migration-first mindset. We assume pilot firms are moving from incumbent systems, not starting from zero.
AI and workflow execution
Plain-language workflows with advisor oversight
AlphaDesk includes a command layer that lets advisors request research, reports, and workflow actions in plain language. Output should still be reviewed as part of a professional advisory process.
- +AI accelerates work. It does not replace fiduciary judgment, supervisory review, or firm policy.
- +Memo and reporting auditability. AlphaDesk already records workflow activity around key recommendation and reporting tasks.
- +Institutional integrations are underway. Direct Schwab and Fidelity access is being pursued in parallel with product buildout.