Sell My Shares Security Practices

The security and privacy of your data is our highest priority at Sell My Shares. This document outlines some of the policies, procedures and systems in place to ensure your data is protected. What information we may collect from you and how we use and disclose it is outlined in the Sell My Shares Privacy Policy.

Website and Application Hosting

The website and applications for Sell My Shares are hosted at WPX and Google Cloud both operating out of data centres in Sydney, Australia. All information exchanged with the Sell My Shares website and applications use 256-bit TLS encryption. Our website and applications are further secured and accelerated by Cloudflare’s global network. You can learn more about Google Cloud’s security here and Cloudflare’s Security here.

Data Storage and Retention

Sell My Shares uses AirTable’s service to store, organise and backup sale data, allowing for audited access and rollbacks in the event of data loss. Additionally, some data may also be stored on our Website. Access to Airtable is restricted and we require all accounts enable 2FA (two (2) factor authentication). Airtable utilises industry-leading Amazon Web Services (AWS) hosting infrastructure, and backups are geo-redundantly replicated across multiple availability zones for data durability. AirTable is ISO/IEC 27001 certified, is SOC 2 (type 2) compliant and uses 256-bit TLS encryption for data transfer and encrypts data using AES-256. You can learn more about security at Airtable here.

Identity Verification (ID Check) Security

Identity information is collected and sent over encrypted connections directly to our identity verification partner. Sell My Shares does not store the drivers license or passport numbers in our database, only the results of your identity check. Sell My Shares has partnered with Frankieone as our KYC/AML (Know Your Customer/Anti-Money Laundering) service provider. Frankieone uses state of the-art data protection, bank grade encryption with AES-256 and SHA-512 (means your data is safe from end to end), has obtained ISO/IEC 27001 certification for their platform and service, and is GDPR compliant. You can learn more about Frankieone here, and the Frankieone’s Security & Compliance trust centre here.

Financial Security

If we collect your credit card details (e.g., find my shares), they are sent over encrypted connections to our payment provider and are not stored or logged in any Sell My Shares database. Payments are processed by Eway (who is PCI-DSS level 1 compliant). You can learn more about Eway’s advanced cybersecurity here.