Security · PocoShift

Encryption

AES-256 + TLS 1.3

The highest-grade encryption available: your data is encrypted both in transit and at rest. The same standards used by national defense agencies.

Monitoring

24/7 SOC monitoring

A live security operations center watches every login, every trade, and every transfer. Anomalies are flagged in under a second.

Humans in the loop

Human review on every withdraw

Above a threshold, a licensed compliance officer eyeballs the withdrawal before it leaves. AI moves fast, humans catch what AI doesn't.

GDPR · EU

GDPR & EU data protection

EU customers' data is stored on EU soil, and you have full GDPR rights: access, portability, deletion. We answer requests within 30 days.

CCPA

California consumer privacy

California residents have the right to know what data we hold, ask us to delete it, and opt out of any sale of personal information.

SOC 2 Type II

SOC 2 Type II audited

An independent firm audits our security, availability, and confidentiality controls every year. Latest report renewed Q1 2026.

ISO 27001

ISO 27001 certified

Our information security management system meets the global ISO 27001 standard, recertified annually by a third-party auditor.

PCI DSS

PCI DSS Level 1

Card data never touches our servers. We use a tokenized PCI-Level-1 processor so your card details stay with the bank that issued them.

Insurance

FDIC & SIPC coverage

Cash sits at FDIC partner banks (JPMC, Citi), up to $250K coverage. Brokerage assets covered by SIPC up to $500K.

Account access

OTP & passkey support

Sign in with a 6-digit one-time code or a hardware passkey. Optional biometric step-up on every withdrawal.

Bug bounty

Public bug bounty

Researchers earn up to $25,000 for verified vulnerabilities. Rotating quarterly third-party pen-tests on top of that.

Regulators

FINRA · SIPC member

POCOSHIFT Securities LLC is a FINRA member regulated by the SEC. Our books are inspected on a published schedule.

Your money & your data, locked down.