Compliance

Market Fortress includes immutable audit logging, role-based access control, encryption at rest and in transit, change management, incident response, and vendor risk management procedures, under continuous review.

For customers and end users in the European Economic Area, we act as a Data Processor with respect to Customer Data. Standard Contractual Clauses are available on request. Submit data-subject requests to ace@marketfortress.app.

California residents have rights under the California Consumer Privacy Act and the California Privacy Rights Act. We do not sell or share personal information for cross-context behavioral advertising. Exercise your rights at ace@marketfortress.app.

The Service is designed to support, not replace, our customers' obligations under the Securities Act, Exchange Act, and FINRA rules. We maintain extensive audit trails to support customers under regulatory inquiry.

We do not process payment card data directly. Subscription billing is handled by a PCI-DSS-compliant payment processor.

A current list of subprocessors is maintained in our Data Processing Addendum. Customers may subscribe to changes by emailing ace@marketfortress.app.

For vendor risk, security questionnaires, or other audit needs, contact ace@marketfortress.app. Our standard response includes a security questionnaire response, attestation letter, and architecture diagrams under NDA.