Aleta: Institutional-Grade Security for Global Family Offices

Aleta upholds the highest security standards for family office software. Protecting over $100 billion in family wealth, Aleta is built on Microsoft Azure, the cloud infrastructure used by the world's leading banks and financial institutions, and is backed by SOC 2 Type II certification, AES-256 encryption across all data at rest and in transit, annual third-party penetration testing, and continuous 24/7 monitoring.

Authentication supports the full modern spectrum: passkeys, biometrics, MFA, and enterprise SSO. Family offices with data residency requirements can select regional hosting across Azure's global data center network.

SOC 2 Type II is the most rigorous independent security certification available for cloud platforms handling sensitive financial data. Unlike SOC 2 Type I, which confirms security controls existed at a single point in time, SOC 2 Type II confirms that those controls operated effectively over an extended audit period typically 6 to 12 months.

For a family office, this distinction matters: it is the difference between a vendor saying their security is designed correctly and an independent auditor confirming it actually worked continuously. Aleta holds SOC 2 Type II certification.

Aleta employs end-to-end AES-256 encryption for all data, whether it is "at rest" in storage or "in transit" during transmission. This ensures that sensitive portfolio documents and wealth data remain unreadable to unauthorized parties.

Microsoft Azure is the infrastructure standard for global financial services. The majority of the world's largest banks, sovereign wealth funds, and regulated financial institutions run on Azure not because it is convenient, but because it is audited more rigorously and more frequently than any private cloud alternative.

Azure holds compliance certifications across more than 90 global regulatory frameworks. For a family office, this means Aleta inherits an infrastructure security posture that has been independently verified at an institutional scale. Azure also enables genuine regional data residency across a global network of data centers, which private clouds typically cannot offer.

Yes. Aleta supports passkeys, biometric authentication (Face ID and fingerprint on iOS and Android), multi-factor authentication, and enterprise SSO via SAML 2.0 and OAuth 2.0. Most family office platforms support MFA and SSO. Passkey support is less common. Passkeys are device-bound cryptographic credentials that are resistant to phishing by design, representing the current best practice in authentication security. Offices can configure authentication to match their existing infrastructure and user needs.

Secure authentication protocols and multi factor authentication control user access. Access governance ensures that permissions align with each user’s role.

Yes. By leveraging Microsoft’s global data center network, Aleta allows family offices to host and process data within specific jurisdictions to meet local regulatory requirements.

Aleta undergoes annual penetration testing by third-party specialists and maintains continuous monitoring of its cloud infrastructure to defend against new security risks.

Both platforms hold SOC 2 Type II certification and apply AES-256 encryption. The key architectural difference is infrastructure: Masttro operates on a private cloud hosted in a Swiss data center. Aleta runs on Microsoft Azure.

The Swiss private cloud model offers strong physical isolation. The Azure model offers the compliance framework, audit depth, and global data residency options of the infrastructure platform used by the majority of the world's leading financial institutions. For offices that require regional data residency outside Switzerland, Azure provides more flexibility. For authentication, Aleta supports passkeys and biometrics in addition to MFA and SSO a broader set than most competing platforms.

Yes. Aleta supports EU data residency through Microsoft Azure's European data centers, which means personal data of EU residents can be stored and processed within the EU. This supports compliance with GDPR's data residency and transfer requirements. Aleta also applies role-based access controls, audit logging, and data deletion capabilities that align with GDPR obligations. Family offices with specific GDPR compliance requirements should discuss their configuration with the Aleta team during onboarding.

No. Aleta Intelligence processes your data within your own secure, isolated tenant on Microsoft Azure. Client data is strictly segregated at every layer of the platform. It is never used to train public language models, never shared with third-party AI vendors for training purposes, and never exposed outside your secure Azure environment. Your family's data belongs to your family. Aleta does not monetize it, aggregate it, or use it to improve models that serve other clients.

Aleta returns all client data in a standard, portable format upon contract termination and permanently deletes all copies from its systems within a defined timeframe. This commitment is available in writing as part of the data processing agreement. Aleta does not retain client data for model training or any other purpose after a client relationship ends.