Security

Built for financial data security

Equity data is sensitive. Nstock is designed with security-first architecture and handled under Japan's APPI framework.

Data Protection

Your equity data, protected

Every layer of Nstock is built to keep your company's sensitive ownership information secure, accessible only to authorized users.

End-to-End Encryption

All data is encrypted at rest using AES-256 and in transit with TLS 1.3. Cap table data, grant documents, and shareholder records are never stored unencrypted.

Role-Based Access Control

Granular permissions let you control exactly who can view, edit, or export equity data. Admin, editor, and viewer roles available per company account.

Single Sign-On Support

SSO integration on Growth and Scale plans. Connect your existing identity provider to manage access without separate credentials.

Audit Logs

Every cap table change, grant action, and export is logged with timestamp and user attribution. Full audit trail for your lawyers and compliance team.

Japanese Data Residency

All data is processed and stored in Japan. Your company's equity information never leaves Japanese data center infrastructure.

Automated Backups

Daily encrypted backups with 90-day retention. Point-in-time recovery available on Scale plans. Your equity records are never at risk of loss.

APPI Compliance

Designed with APPI compliance in mind

Nstock is built to comply with Japan's Act on the Protection of Personal Information (APPI). We do not sell or share your company's equity data with third parties and never use your data to train models.

  • APPI-compliant data handling and retention policies
  • No third-party sharing of equity or shareholder data
  • Model training opt-out enforced by default
  • Annual security reviews by independent assessors
Data Handling Summary
Data residency: Japan only
Third-party sharing: never
AI training on your data: blocked by default
APPI retention policies: enforced
Annual independent security review
Questions

Questions about security or compliance?

Our team can walk you through our security architecture and data handling practices in detail.