Is PineSeven Safe?
P7 is committed to ensuring reliability and the highest standards of privacy and information security. Our organizational structure and technical solutions are purpose-built for the secure processing of sensitive information. Every aspect of P7, from systems to services, is designed to deliver a secure and dependable experience for our customers.
This page serves as a valuable resource for those interested in P7, offering transparency into our security posture and our steadfast commitment to maintaining the highest standards of security across our operations.
PINESEVEN IS COMPLIANT WITH CCPA/CPRA, GDPR, SOC2 TYPE II, ISO 27001, U.S. ESIGN Act of 2000, eIDAS AND WCAG ACCESSIBILITY GUIDELINES. ALL PINESEVEN’S SUBPROCESSORS ARE COMPLIANT AND CERTIFIED TO THESE STANDARDS.
P7
DEFENDERS OF YOUR DATA
It’s our business to ensure reliability and the highest standards of privacy and information security. Our organizational structure and technical solutions are purpose-built for the secure processing of sensitive information. Every aspect of P7, from systems to services, is designed to deliver a secure and dependable experience for our customers.
Infrastructure security
PineSeven restricts privileged access to encryption keys to authorized users with a business need.
PineSeven requires authentication to systems and applications to use unique username and password or authorized Secure Socket Shell (SSH) keys.
System access restricted to authorized access only.
PineSeven utilizes a log management tool to identify events that may have a potential impact on the company’s ability to achieve its security objectives.
PineSeven’s network is segmented to prevent unauthorized access to customer data.
PineSeven reviews its firewall rulesets at least annually. Required changes are tracked to completion.
PineSeven uses firewalls and configures them to prevent unauthorized access.
PineSeven restricts privileged access to the firewall to authorized users with a business need.
PineSeven completes termination checklists to ensure that access is revoked for terminated employees within SLAs.
PineSeven requires authentication to the “production network” to use unique usernames and passwords or authorized Secure Socket Shell (SSH) keys.
PineSeven’s production systems can only be remotely accessed by authorized employees via an approved encrypted connection.
PineSeven uses an intrusion detection system to provide continuous monitoring of the company’s network and early detection of potential security breaches.
PineSeven has infrastructure supporting the service patched as a part of routine maintenance and as a result of identified vulnerabilities to help ensure that servers supporting the service are hardened against security threats.
Organizational security
PineSeven has electronic media containing confidential information purged or destroyed in accordance with best practices, and certificates of destruction are issued for each device destroyed.
PineSeven maintains a formal inventory of production system assets.
PineSeven performs background checks on new employees
PineSeven requires contractor agreements to include a code of conduct or reference to the company code of conduct.
PineSeven requires visitors to sign-in, wear a visitor badge, and be escorted by an authorized employee when accessing the data center or secure areas.
PineSeven requires employees to acknowledge a code of conduct at the time of hire. Employees who violate the code of conduct are subject to disciplinary actions in accordance with a disciplinary policy.
PineSeven requires contractors to sign a confidentiality agreement at the time of engagement
PineSeven requires employees to sign a confidentiality agreement during onboarding.
PineSeven’s managers are required to complete performance evaluations for direct reports at least annually.
PineSeven requires passwords for in-scope system components to be configured according to the company’s policy.
Product security
PineSeven’s datastores housing sensitive customer data are encrypted at rest.
PineSeven performs control self-assessments at least annually to gain assurance that controls are in place and operating effectively. Corrective actions are taken based on relevant findings
PineSeven’s penetration testing is performed at least annually. A remediation plan is developed and changes are implemented to remediate vulnerabilities in accordance with SLAs
PineSeven uses secure data transmission protocols to encrypt confidential and sensitive data when transmitted over public networks.
PineSeven’s formal policies outline the requirements for the following functions related to IT / Engineering:
- vulnerability management;
- system monitoring.
Internal security procedures
PineSeven has Business Continuity and Disaster Recovery Plans in place that outline communication plans in order to maintain information security continuity in the event of the unavailability of key personnel.
PineSeven has a documented business continuity/disaster recovery (BC/DR) plan and tests it at least annually.
PineSeven maintains cybersecurity insurance to mitigate the financial impact of business disruptions.
PineSeven has established a formalized whistleblower policy, and an anonymous communication channel is in place for users to report potential issues or fraud concerns.
PineSeven’s data backup policy documents requirements for backup and recovery of customer data.
PineSeven notifies customers of critical system changes that may affect their processing.
PineSeven’s risk assessments are performed at least annually. As part of this process, threats and changes (environmental, regulatory, and technological) to service commitments are identified and the risks are formally assessed. The risk assessment includes a consideration of the potential for fraud and how fraud may impact the achievement of objectives.
PineSeven has a documented risk management program in place that includes guidance on the identification of potential threats, rating the significance of the risks associated with the identified threats, and mitigation strategies for those risks.
PineSeven has a configuration management procedure in place to ensure that system configurations are deployed consistently throughout the environment.
PineSeven requires changes to software and infrastructure components of the service to be authorized, formally documented, tested, reviewed, and approved prior to being implemented in the production environment.
PineSeven restricts access to migrate changes to production to authorized personnel.
PineSeven has a formal systems development life cycle (SDLC) methodology in place that governs the development, acquisition, implementation, changes (including emergency changes), and maintenance of information systems and related technology requirements.
PineSeven has an external-facing support system in place that allows users to report system information on failures, incidents, concerns, and other complaints to appropriate personnel.
PineSeven communicates system changes to authorized internal users.
Data and privacy
PineSeven has formal retention and disposal procedures in place to guide the secure retention and disposal of company and customer data.
PineSeven has a data classification policy in place to help ensure that confidential data is properly secured and restricted to authorized personnel.
These entities are named as sub-processors as they access end-users' personal data on behalf of P7 to assist us with our services' provision to our Customers.
Sub-processors used by P7
Sentinel
YOUR MONEY, PROTECTED
P7 SENTINEL
Our sophisticated fraud prevention system powered by cutting-edge machine learning algorithms and bolstered by an expansive database encompassing over 700 billion data points, P7 Sentinel combines a suite of advanced security features seamlessly integrated into its framework.
P7 Sentinel operates by dynamically analyzing user behavior and device attributes in real-time, facilitating agile risk assessment and preemptive threat detection. By cross-referencing user-provided information against a vast reservoir of verified identities and suspicious activities, P7 Sentinel swiftly identifies and neutralizes potential risks, safeguarding our stakeholders.
Reporting vulnerabilities
Responsible Disclosure
Our business depends on making sure our services are safe. If you find a security vulnerability we hope you’ll let us know.
How to report a security bug
To report a security bug:
You need an account on HackerOne to be eligible for our Bug Bounty Program.
Request an invite to our bug bounty program on HackerOne by sending an email with your HackerOne username and email to bugbounty@pineseven.com.
Rewards are granted at our discretion. Please do not send any reports to this address.
Testing should be done on your own live P7 account.
Security is a never-ending job and we are constantly seeking to improve.
If you have any questions about our security efforts or suggestions on how PineSeven could be improved, please let us know at support@pineseven.com
Enterprise Resilience
At PineSeven (P7), our unwavering commitment to operational effectiveness is pivotal, especially in the face of varied challenges. Our enterprise resilience strategy is comprehensive, encompassing several key aspects:
At P7, comprehensive risk assessment and vigilant monitoring form the cornerstone of our enterprise resilience strategy. We employ advanced analytical tools and methodologies to evaluate market dynamics, regulatory changes, and operational risks. Our dedicated team meticulously scrutinizes every aspect of our portfolio and internal processes, ensuring prompt identification of potential threats.
This continuous and systematic approach allows us to adapt quickly to evolving financial landscapes, thereby safeguarding investor interests and maintaining the integrity and performance of our investments.
P7's Business Continuity and Disaster Recovery (BCDR) planning is a strategic priority, designed to ensure uninterrupted operation and service delivery. Our BCDR framework encompasses robust contingency plans, resilient infrastructure, and rapid response mechanisms. We regularly update and test our BCDR protocols to handle unforeseen events effectively, from natural disasters to cyber threats.
This proactive planning enables us to maintain operational stability and protect our investors' assets, ensuring minimal impact from potential disruptions.
P7 employs a dynamic crisis management approach, focused on swift identification, assessment, and resolution of critical incidents. We have established a dedicated crisis management team, equipped with clear protocols and effective communication strategies. This team is responsible for mitigating risks, minimizing impact on operations, and safeguarding investors' interests during emergencies.
Through ongoing training and simulations, we ensure preparedness for a range of crisis scenarios, from market volatility to operational challenges.
P7's rigorous stress testing regimen is integral to our risk management strategy. We conduct comprehensive stress tests to evaluate the resilience of our investment models and operational framework under various extreme but plausible scenarios. These tests encompass market downturns, liquidity crunches, and operational disruptions, providing insights into potential vulnerabilities. The outcomes guide our decision-making process, enhancing our strategies for risk mitigation and capital preservation.
This thorough approach ensures P7's stability and sustainability, even in the face of significant economic stresses
Open Books, Open Opportunities
At P7, we redefine the investment landscape by embracing a model of full transparency and direct ownership. Unlike conventional platforms that serve merely as intermediaries, we take a proactive stance with end-to-end responsibility for our fully owned business portfolio. This approach not only sets us apart but also fortifies our commitment to our investors’ success.
Transparency in Action
Complaints and Fraud Reports
Do you want to submit a complaint?
What happens after I make a complaint?
PineSeven will:
email you that we got your complaint
ask for any extra information, if we need it
investigate your case and your concerns, referring to the Terms and Conditions
email you to explain what actions we took and why
We’ll look into your case as quickly as possible. We aim to acknowledge your complaint within 24 hours and send you a final response within 15 calendar days. On rare occasions, we may need to extend the deadline to investigate your case in detail and we’ll let you know if we need more time.
Contact Us
Choose the right solution
Select from tailored investment options that align with your financial goals. Each plan with P7 offers a unique blend of security and growth potential.
PULSE
One-year plan with investment range from €1.5K to €5K. Ideal for short-term growth.
8,1%
/ yr.
- 8,1% Flat Rate Interest
- €50 Sign-up Bonus
- €90 Referral Bonus
- One-Time Reinvest
- Rapid Capital Turnover
- 125K Plan Ceiling
ZENITH
Three-year commitment with options from €10K to €70K. Balancing longevity and returns.
12,5-16,2%
/ yr.
- 37.5% Base / 3 Yrs
- €150 Referral Bonus
- 0,9% Reinvestment Bonus
- 1% Commitment Bonus
- Three Reinvests Max
- 2,3M Plan Ceiling
ORACLE
Top Rated
Five-year horizon, investing €100K to €800K. For profound, long-term financial expansion.
17,1-23,3%
/ yr.
- 85.5% Base / 5 Yrs
- 1% Commitment Bonus
- 0,5% Longevity Bonus
- 0,9% Reinvestment Bonus
- 2% Cumulative Loyalty Bonus
- 10M Plan Ceiling
Maximize returns, Minimize risks. Invest smarter.
Company
Resources
- Knowledge Base
- Insights
- Plan Terms
- Accessibility
- Trust Center
- System status
Copyright: © 2024 PineSeven. All Rights Reserved.