Your security is our priority

Bank-grade security, built in

Your financial data is some of the most sensitive information you have. We treat it accordingly. Every piece of data that flows between your device and our servers is encrypted using industry-standard TLS (Transport Layer Security), and all stored data is encrypted at rest with AES-256 — the same standard used by major banks and government agencies.

This means that even in the unlikely event of a breach, your personal information and financial data remain unreadable without the cryptographic keys — which are themselves protected by multiple layers of security.

How we protect your account

• Strong authentication. We require secure, unique credentials and support multi-factor authentication to keep your account in your hands only.
• Continuous monitoring. Our systems watch for suspicious activity 24/7 — unusual login patterns, large withdrawals, or access from unfamiliar locations trigger immediate review.
• Automatic timeouts. Your session locks after a period of inactivity, preventing unauthorised access on shared or unattended devices.
• Secure infrastructure. We run on cloud infrastructure with SOC 2 compliance, meaning our providers meet rigorous standards for security, availability, and confidentiality.

Your money is segregated

Client funds are held in segregated accounts with top-tier UK banks, completely separate from Abervest's own corporate accounts. This means your money is protected even in the unlikely event that Abervest itself faces financial difficulties.

Abervest is designed to operate within the Financial Services Compensation Scheme (FSCS), which covers up to £85,000 per eligible claimant in the event of an authorised firm's failure — the same scheme that protects deposits at UK banks and building societies. As a demonstration platform, Abervest is not yet an authorised firm, so FSCS protection does not currently apply; this page describes the safeguards the platform is built to provide.

Your privacy, respected

We collect only the information we need to provide our service and meet our regulatory obligations. We never sell your personal data to third parties, and we're transparent about how we use your information. Our full privacy policy is available to read at any time, written in plain English — not legal jargon.

What you can do

Security is a partnership. Here are a few simple steps you can take to keep your account extra safe:

• Use a unique, strong password that you don't reuse across other websites.
• Enable multi-factor authentication for an additional layer of protection.
• Keep your email account secure — it's often the key to resetting passwords elsewhere.
• Be alert to phishing attempts. We'll never email or text you asking for your password.