Retirelens

Security at Retirelens

How we protect your retirement information.

Effective Date: August 3, 2026

Your retirement plan can include some of your most personal information, including finances, family relationships, estate and legacy information, and important documents. Security is foundational to how Retirelens is designed and operated.

Retirelens uses layered safeguards across our infrastructure, application, authentication, and operations to help protect your information. No system can guarantee absolute security, and we continually evaluate our protections as Retirelens evolves.

1. Our Security Principles

Your information is yours to control. We do not sell your personal information, and we do not use your sensitive planning information for targeted advertising.

Access is intentional. Access to your Retirelens account and information is controlled through authentication and permissions supported by the Services.

Protection is layered. We use multiple technical and operational safeguards rather than relying on a single security control.

2. Data Protection

Retirelens encrypts information in transit and at rest and uses secure key-management practices to help protect your information.

Encryption is one part of our broader security approach, which also includes authentication, access controls, monitoring, vulnerability management, backups, and operational safeguards.

3. Secure Infrastructure

Retirelens uses cloud infrastructure with separated development, staging, and production environments, network protections, monitoring, vulnerability management, patching, backups, and incident-response processes.

We review and update our technical and operational safeguards as the platform and security landscape evolve.

4. Account Authentication

Retirelens uses passwordless authentication. Users access Retirelens through supported Google or Apple sign-in or through a one-time passcode sent to their email address. Users do not create a separate Retirelens account password.

Your email, Apple, or Google account may therefore play an important role in protecting access to Retirelens. We encourage you to secure those accounts and enable multi-factor authentication on them when available.

5. Digital Vault Security

Documents uploaded to the Digital Vault are encrypted, isolated from public access, and protected through authenticated access and application access controls.

Keep your original documents outside Retirelens as well. The Digital Vault should not be used as the sole repository for wills, trusts, powers of attorney, healthcare directives, financial records, or other important documents.

6. Workforce Access

Retirelens limits workforce access to user information based on role and legitimate business need. Retirelens personnel do not access documents in your Digital Vault except when necessary for authorized support or operational purposes, with appropriate authorization and audit logging.

We maintain controls intended to limit internal access to the information needed for an authorized purpose.

7. Monitoring and Vulnerability Management

Retirelens uses security monitoring and alerting capabilities provided through our cloud infrastructure and other security controls to help identify suspicious activity and potential security issues.

We also use vulnerability-management and patching processes to identify and address security issues in our systems.

8. Security Incident Response

If we discover a security incident, we investigate and take appropriate steps to contain, remediate, and understand the incident. If an incident affects personal information and notification is required by applicable law, we will notify affected individuals and/or appropriate authorities as required.

Additional information about our handling of personal information is available in our Privacy Policy.

9. What We Do Not Do

We do not sell your personal information.

We do not use your sensitive planning information for targeted advertising.

We do not ask you to create or provide a Retirelens account password. Authentication occurs through supported Google or Apple sign-in or a one-time passcode sent to your email.

We do not make your Digital Vault documents publicly accessible.

10. Your Role in Security

You can help protect your Retirelens account by protecting access to the email, Apple, or Google account you use to sign in; enabling multi-factor authentication on those accounts when available; keeping one-time passcodes private; keeping your devices secure; and notifying us promptly if you believe your Retirelens account or a connected sign-in account has been compromised.

Do not share access to your Retirelens account. If Retirelens provides a designated sharing or collaboration feature, use that feature rather than giving another person access to your own sign-in credentials or one-time passcodes.

11. Reporting a Security Concern

If you believe your account has been compromised or you have identified a potential security issue involving Retirelens, use the contact or feedback feature on our site.