Security is imperative for online platforms. The information that is transmitted between a platform and its users, and particularly the information the platform saves onto its server, could leave users vulnerable to online crime, such as fraud, if left unprotected. Although platforms have their own security measures, there’s a lot you can do as well.


As a user, you play a big part by ensuring that your password is complex enough to deter malicious access. So while we invest in ensuring that our service is secure, if your password is ‘John123’, there’s little we can do to help.

A secure password should be:

  • Complex

  • Don’t use obvious words, or don’t use words at all. The more random your password is, the better.

  • Use special characters like # and $

  • Use numbers

  • Vary your letters between uppercase and lowercase

  • Long

  • At least 8 characters. 12 is better

  • Temporary

  • You should regularly change your password. As a rule of thumb, we recommend doing this at least every 6 months.

Don’t allow your browser to save the password for you. If you do this and you lose your device (PC, laptop, Ipad, etc,), whoever finds it will have access to your private content. You should also avoid writing passwords down.

Tip: To create a strong password, we recommend using the initials of a song you like, or a phrase that only you would remember, and then splicing it with special characters and numbers.

Secure communications

If you ever wondered what the lock next to the URL on your browser means, then this is for you:

Many people would relish the opportunity to get hold of your bank details. One of the ways platforms prevent this happening is by encrypting the data you give them. This is usually done using a SSL certificate. If you’re using a modern browser, it should tell you if the site you’re visiting is using such a certificate. This is usually indicated next to the site’s URL.

Furthermore, some sites claim to be companies they’re not. That’s when SSL certificates will come to your rescue: These are only issued by bona-fide companies (like Symantec), and will only work for those sites. If your browser tells you that the SSL certificate is genuine, it means you are in the correct domain. All legitimate equity platforms have SSL certificates, so keep an eye out for these when you’re looking to invest online. If you don’t see one, don’t risk it.

How we safely store your information

Most platforms store data about their customers – be that their addresses, birthdates, mobile numbers, etc. It is the platform’s responsibility to ensure that this information is secure:

  • Personal data must be kept ‘behind’ a password. Until the platform has authenticated the user, no personal data should be visible.

  • Platforms must ensure that all backups of its clients’ data are encrypted.

  • The server’s firewall ensures that you can only access the platform’s database from an appropriate source. In other words, you can’t just go online and find it; these databases can only be accessed through secure internal channels.

When requested, platforms should inform their customers about the security measures protecting their data.