Data Destruction
We retain substantial records for at least years in accordance with federal securities laws. After these retention periods, we may need to discard investor information. In such cases, we take the utmost care in ensuring privacy and permanence.
Paper records received for disposal, such as old certificates, are shredded using a fine microcut device. They should be checked for retention needs just like electronic records. They also should be logged in an action list.
Deletions happen at the TA-1 location through team members' destruction without outside parties, and such members must be fingerprinted to handle legacy certificates. In organizing electronic files, team members may be required to authenticate through hardware security keys or authenticator applications which reside at the secure location. These practices let the team keep precise tallies on where any investor information lies.
Devices used to manage sensitive information employ encrypted disks to harden working copies against local theft. Wiped drives are still considered protected until their trashed contents and unused space are wiped over by a rewriting scratch utility such as cipher. While we do not maintain consumer reports or credit assessments for our business purposes, any legal scans of lost investor information must only be accessed and processed by fingerprinted team members.
See also the rough data map placeholder while we migrate in other TAD docs and communication systems. the rough data map placeholder while we migrate in other TAD docs and communication systems.