Your Data, Guarded.
Our Governance.

At Minveo AG, we process personal data with the same mathematical precision we apply to portfolio management. This policy outlines the exact scope, purpose, and security protocols governing every byte we handle.

Data Encryption Visualization

Last Updated: 2026

The Data We Observe

Transparency is the baseline of trust. Here is exactly what we capture.

Direct Identifiers

We collect standard contact information when you engage with our forms. This includes your full name, email address, phone number, and company affiliation. This data allows our relationship management systems to authenticate your identity and route inquiries to the correct advisory team.

Technical Telemetry

To ensure the security and performance of our infrastructure, our servers automatically log metadata. This includes your IP address, browser type, device operating system, and timestamps of access. We use this telemetry exclusively for anomaly detection and cybersecurity hardening.

Engagement Patterns

We analyze how visitors navigate our digital property to improve the clarity of our offering. This involves tracking page views, dwell time, and interaction with specific features. All interaction data is anonymized and aggregated; we do not link individual browsing behavior to personal identity.

The Minveo Data Lifecycle

A static view of how data moves through our infrastructure—from your browser to our secure vaults.

Phase
Trigger
Process
Retention
Ingestion
Form Submission
HTTPS Encryption → AWS WAF
24h (Buffer)
Processing
System Analysis
Deduplication & Validation
Active Duration
Storage
Record Creation
AES-256 Encrypted DB
Legal Limit

Method Note: This lifecycle map is derived from our internal compliance audit procedures. It represents the deterministic flow of data rather than a speculative user journey. "Retention" refers to policy limits, not active usage.

The Investor's Audit

Due diligence questions to ask any AI-driven asset manager regarding data handling.

1. Where is the data physically stored?

Minveo utilizes EU-based cloud infrastructure (AWS Frankfurt) for primary processing, ensuring GDPR alignment. US access is strictly controlled via encrypted tunnels.

2. Is my financial data commingled?

No. Segregated database architecture ensures your personal identifiers are logically separated from aggregated market analysis data.

3. Do you sell data to third parties?

Strictly prohibited. Minveo does not monetize user data. Revenue is generated solely through asset management fees.

4. How do you handle breach notification?

Immediate. We follow BaFin and SEC protocols, notifying affected parties within 72 hours of confirmed containment.

5. Can I export my data?

Yes. Upon request, we provide a machine-readable JSON export of all personal data associated with your inquiry.

6. Is AI training done on my data?

No. Your personal inputs are used for relationship management only. Our AI models are trained on anonymized, aggregated market data.

Fortified Infrastructure

We treat security as a constraint to be maximized. All data in transit is secured via TLS 1.3. Data at rest is encrypted using AES-256 standards. Access controls follow the principle of least privilege, enforced by multi-factor authentication (MFA) across all internal systems.

  • SOC 2 Type II Alignment
  • ISO 27001 Certified Partners
  • Annual Penetration Testing
Read full compliance report
Server Security

Questions about your data?

Our Data Protection Officer is available to answer specific queries regarding Minveo AG's privacy practices.

Widenmayerstraße 12, 80538 München, Deutschland

+49 89 954576010