Data Security

Last updated: October 2, 2026

StellarWinds Technologies Inc. takes the security of your personal information seriously. This page explains the specific measures we take to protect the sensitive information you share with us during the authorized-user tradeline process.

Encryption at rest

When you submit sensitive details through your secure StellarWinds account, every field is encrypted immediately using AES-256-GCM (Advanced Encryption Standard with 256-bit keys and Galois/Counter Mode). This is the same encryption standard used by major banks and government agencies.

  • Your full legal name, date of birth, address, and SSN are each encrypted individually
  • The encryption key is stored separately from the data and is never accessible to the application database
  • Each encryption operation uses a unique random nonce, so even identical values produce different encrypted outputs
  • Only the last four digits of your SSN are stored in readable form (for verification purposes)

Encryption in transit

All data transmitted between your browser and our servers is protected with HTTPS. We enforce HTTPS on all pages and API endpoints. Strict-Transport-Security (HSTS) headers instruct your browser to always connect securely. Customer account pages additionally set a Content-Security-Policy that restricts scripts, frames, and external connections.

Access controls

Access to your encrypted details is strictly limited:

  • Only StellarWinds administrators can request access to your decrypted information
  • Viewing your details requires a second authentication step (multi-factor verification)
  • Every access is permanently logged with the viewer's identity, timestamp, and IP address
  • Access logs cannot be edited or deleted

Automatic deletion

We don't keep your sensitive information longer than necessary:

  • Order completed: Your encrypted details are automatically and permanently deleted 30 days after your order is marked complete.
  • Order closed: Details are deleted 7 days after closure.
  • In progress: Details are kept for a maximum of 60 days from submission, even if the order has not yet completed.

When data is deleted, all encrypted fields are permanently erased (set to null). The deletion is irreversible. We retain only the audit log entry (which contains no sensitive data) as proof that the deletion occurred.

Your right to request deletion

You may request early deletion of your information at any time. If your order is already complete or closed, we will delete your data immediately. Otherwise, your request will be reviewed by our team and processed promptly.

To request deletion, email techwizard@stellarwinds.tech with the subject line “Delete my details.”

Secure account access

Your StellarWinds account is accessed through one-time sign-in links sent to your email — no password to remember or protect. Each link is single-use, expires after 24 hours, and can only be claimed by confirming the email address it was sent to.

Infrastructure

  • Application hosted on Vercel (SOC 2 Type II compliant)
  • Database hosted on Supabase (SOC 2 Type II compliant, built on AWS)
  • Row-level security (RLS) enabled on all tables
  • No sensitive data in application logs (request bodies are not logged)

Contact

If you have questions about our security practices, contact us at techwizard@stellarwinds.tech or call 1 (833) 691-0635.