Security Policy

Effective date: May 4, 2026

BlitzPulse uses technical and organizational controls designed to protect accounts, broker integrations, billing records, audit logs, and product data.

Controls

• TLS for network transport.
• Password hashing for stored passwords.
• MFA and passkey support for account protection.
• Encrypted storage for sensitive broker tokens and configured secrets.
• Tenant, role, and plan gates for account access.
• Audit logging for security-sensitive operations.
• Monitoring and incident review for errors, unusual access, and degraded services.

Your Responsibilities

Use a strong unique password, enable MFA or passkeys, keep broker accounts secure, review broker permissions before connecting, and contact support immediately if you suspect unauthorized access.

Incident Notices

If we determine that a security incident requires user notification, we will provide notice using in-app messages, email, or another legally appropriate method.

Report security concerns to security@blitzglobalcapital.com.