SSL/TLS encryption
Data moving between traders, teams and the Intivion ecosystem is protected with SSL/TLS encryption.
Resources · Security Hub
Brokerage Technology Built With Data Security at Its Core
Your brokerage handles sensitive client data every day. Intivion protects it in transit and at rest, across every product and every team.
Trader & team devicesClient portal · CRM
Data in transit · SSL/TLS
Your dedicated AWS environmentIntivion ecosystem
Data at rest · Encrypted
Stored securelyClient data · KYC documents · Records
Security Isn't a Feature You Switch On
It has to be built in wherever data moves, from a trader's first registration to every team that accesses their account later.
Encryption at rest
Personal details, phone numbers and email addresses are encrypted while stored.
Controlled access
Access is set by responsibility and brand, so teams see only the data they need.
Activity and accountability
A record of key activity shows what changed, when, and who did it.
Infrastructure isolation
Each brokerage runs in its own dedicated AWS environment, separate from every other brokerage.
Document protection
KYC and client documents stay inside controlled workflows, never passed around outside the system.
Auditability
Keep Track of Every Action
When client data changes, a lead is reassigned or a document is updated, you need a reliable record. AltimaCRM keeps activity histories across key workflows, so authorised teams can review, investigate and stay accountable.
- User activityWhich authorised user acted.
- Changes and updatesA history of important changes to client and operational data.
- Document historyClient activity and compliance documents, tracked.
- Operational oversightClear visibility of important actions for management and compliance.
Activity historyClient #4821
- Document updatedCompliance team · 14:32
- Withdrawal reviewedFinance team · 15:06
- Account information changedAuthorised user · 16:21
- Lead status changedSales team · 16:48
Network access
Decide Where Your Team Can Log In From
A valid username and password may not be enough. IP allowlisting restricts CRM access to approved locations and networks, blocking logins from unknown IP addresses.
CRM login attempts
Approved office IP203.0.113.24
✓ CRM accessApproved VPN IP198.51.100.7
✓ CRM accessUnknown IP45.83.91.120
✕ Access restrictedCloud infrastructure
Built on AWS. Separated for Your Brokerage.
Intivion runs on Amazon Web Services, with a dedicated environment for each brokerage, so every brokerage's infrastructure and data stay separate. As you grow, the infrastructure grows with you, without changing how your teams work.
Brokerage ADedicated environment
CRM · Client data · Documents · Operations
Encrypted at restBrokerage BDedicated environment
CRM · Client data · Documents · Operations
Encrypted at restBrokerage CDedicated environment
CRM · Client data · Documents · Operations
Encrypted at restSeparate brokerage environments. Separate operational data.
FAQ
Straight answers to what compliance teams, auditors and boards ask.
Is client data encrypted in transit and at rest?
Yes. Data in transit is protected with SSL/TLS encryption, and personal details, phone numbers and email addresses are encrypted at rest.
Is our data kept separate from other brokerages?
Yes. Intivion runs on Amazon Web Services, and every brokerage has its own dedicated AWS environment, keeping its infrastructure and data separate.
Who can access client information in AltimaCRM?
Only the people you grant access to. Access is set by role and brand, so each team sees only the data its job needs.
Can we restrict CRM logins to our office or VPN?
Yes. IP allowlisting limits CRM access to approved IP addresses, such as your office or VPN, and blocks logins from anywhere else.
Does Intivion keep an audit trail of user activity?
Yes. AltimaCRM records which authorised user made a change, what changed and when, across key brokerage workflows.
Your Brokerage. Your Clients. Your Data. Protected.
Talk to us about your security, infrastructure, data and compliance requirements.