Data Privacy and Security

Use IncomeWize anonymously without disclosing who you are.

No collecting

Your retirement data is never collected

No storing

Nothing is saved to any server or database

No selling

Your data is never sold to anyone

No sharing

Never shared with third parties

ENCRYPTION

Industry-Standard Encryption

All communication between your browser and IncomeWize servers is encrypted with TLS 1.3 (TLS 1.2 in older browsers), with forward secrecy and HSTS. Outdated versions (TLS 1.0 and 1.1) are turned off. IncomeWize website encryption is rated A+ by Qualys SSL Labs.

Qualys SSL Report

Qualys SSL Report

SECURITY HEADERS

Hardened Browser Security

All browser interactions with IncomeWize use hardened security headers to handle content more safely, enforce secure connections, and limit access to sensitive features. IncomeWize website security is rated A by Snyk.

Snyk Website Security Report

Snyk Website Security Report

HOSTING

Secure Data Centers

IncomeWize runs in a secure data center operated by our hosting provider, which reports SOC 2 Type II compliance. The facility includes multi-stage physical access controls, video surveillance, on-site security personnel, and redundant power and cooling. Your retirement plan is processed on these servers but is never stored.