Every Allux site is served over SSL with automated certificate management. Published sites are server-side rendered and cached — no client-side dependency for your content to exist.
Databases are backed up automatically to encrypted, off-site storage with tested restores. Access to advisor accounts and content is permission-scoped: your data is readable and editable only by your own logins and the Allux service roles that support you.
One advisor can never read or modify another's account, projects, pages, media, or leads. That isn't a policy statement — it's enforced by ownership checks on every collection and proven by a standing permission-matrix test suite that runs against the platform. AI endpoints carry their own authentication, rate limits, and per-account quotas.
Every published version of every page is archived as an immutable snapshot — timestamped, non-editable, and retained for at least five years — with the compliance-check report stored alongside it, so the record shows not just what was published but what was checked. One export produces the complete archive with per-file integrity hashes and a verifiable manifest: alter any file and verification fails. Designed to support your Rule 204-2 recordkeeping.
An optional review-before-publish workflow enforces sign-off server-side: with review enabled, nothing goes live without approval, and every approval is logged.
Allux analytics are first-party and cookieless: no tracking cookies, no cross-site identifiers, and no visitor identification. Tools that put names to anonymous website visitors exist and are marketed to advisors — we will not build one. A person researching a fiduciary is often at a sensitive moment, and your website's privacy posture should match the trust you ask clients to place in you. Lead forms are spam-throttled, input-sanitized, and stored only in your isolated account.
If you leave, your domain, content, and imagery leave with you — the process and timeline are committed in the written Portability Guarantee.
Questions from your compliance or IT reviewer? info@allux.ai — we answer diligence questionnaires directly.