Data Protection
Fund and investor records are treated as official once saved - not as a draft anyone can quietly overwrite.
- Saved fund, investor and client details lock in place. A later change waits until a second Harmonious person approves it, and nobody can approve their own change.
- Where separation of duties applies - fee terms, documents, distributions - a different person must sign off before anything takes effect.
- Access changes, including changes that were refused, are written to an append-only log that cannot be edited after the fact.
- Tax identification numbers are stored encrypted. The app displays only the last four digits.
Identity & Access
Nobody reaches fund or investor data on a password alone, and nobody gets broad access by default.
- Anyone signing in to the Harmonious staff or client workspace must complete a second step at every sign-in - a passkey (Face ID, Touch ID or Windows Hello) or an authenticator app. Codes are issued under the name "Harmonious".
- If someone loses their second step, access is restored only after two Harmonious staff independently confirm who that person is.
- Identity verification is completed on a person's own account before they can reach investor records, documents or money screens.
- Access follows role and scope: a person sees the funds, clients and records they are responsible for. Extra permissions are granted to one named person and are never handed out because of an email domain.
- Access can be revoked, suspended or archived at any time, and each account's most recent sign-in is recorded.
Money Movement Controls
Harmonious prepares payment work; people release it.
- Harmonious does not automatically initiate a bank debit, wire, ACH transfer, tax payment or refund.
- Payment and distribution files are prepared inside the app and released only after a named person reviews them.
- The final approval on a distribution must come from someone other than the person who prepared it.
Bank Connections (Plaid)
Connecting a bank account is optional. Clients can upload wire instructions and bank statements instead. If you do connect, we use Plaid and access is read-only.
- Before the bank sign-in window opens, you must be signed in with two-step verification (an authenticator app).
- You also check a consent box that links to our Privacy Policy and Plaid's End User Privacy Policy. We record who agreed, when, and which version, and we check that record before the connection starts.
- Your bank login details go straight to Plaid and your bank. Harmonious never sees or stores them.
- The access key Plaid gives us is kept only on our servers, in restricted storage. It never reaches your browser.
- We use the connection to read account details, balances and deposits so payments can be matched. We never use it to move money, and we never sell this data.
- You can disconnect at any time from Banking. Bank-connection data is kept while you're connected. When you disconnect or ask us to remove it, we delete it, unless a legal or regulatory hold applies. A person reviews and logs every deletion.
- Our written Information Security Policy covers Plaid and is reviewed every year. Ask support@harmonious.co for a copy.
Privacy
You can ask us what we hold about you, ask us to fix it, or ask us to remove it.
- From Account -> Privacy you can request a copy of your data, a correction, or deletion.
- Requests are answered within 30 days by a person, not an automated job.
- Deletion never removes financial, tax, regulatory or legal records we are required to keep - we tell you what was kept and why.
- How we collect and use personal information is described in our Privacy Policy.
- A list of the service providers we rely on is available by asking support@harmonious.co.
How long we keep records
Every record family has a written retention rule in our Compliance & Controls register. Nothing is deleted automatically - a person reviews each disposition, and a legal or regulatory hold blocks it.
- Tax records (K-1s, filings, workpapers): 7 years after the return is filed.
- Fund formation and offering documents (PPM, operating agreement, subscriptions): the life of the fund plus 7 years after dissolution.
- Investor identity and verification data: 7 years after the investor relationship ends.
- Fund books and accounting records: 7 years after the period they cover.
- Signed agreements: 7 years after the agreement ends; the append-only activity history is kept for the life of the platform.
- Marketing contacts: until consent is withdrawn, then 3 years as proof of consent.
Compliance & Assurance
No external assessments have been completed yet, so Harmonious makes no SOC 2, ISO, CSA STAR or GDPR certification claim. Results will appear here only once an outside assessor's report exists.
What this page does not claim
- This page is Harmonious's own statement about how our product works. It is not a certification, an audit opinion, a regulatory filing or legal advice.
- Harmonious is not certified SOC 2 or ISO 27001 and does not claim to be. Any such statement would follow only after an outside auditor's report exists.
- Our hosting provider publishes its own platform evidence about how the environment is run and monitored at /.well-known/trust.html. That page belongs to the provider, not to Harmonious, and is separate from this one.
Security Contact
Found something that looks wrong or unsafe? Write to support@harmonious.co. A person reads every message, and two staff members must confirm your identity before we change anything on your account.
Related: Privacy Policy · Terms of Service · Hosting provider’s platform evidence
Trust Documents
No documents are available yet. Ask support@harmonious.co if you need security information for a review.