Institutional Security Architecture
OTR Partners employs enterprise-grade technical and organizational safeguards to protect confidential partnership data, proprietary deal flow, intellectual property valuations, and Limited Partner personal information against unauthorized access, alteration, or destruction.
Encryption & Technical Safeguards
- Data in Transit: All communications between your browser and our Site/Investor Portal are protected using TLS 1.3 (Transport Layer Security) with strong cipher suites.
- Data at Rest: Sensitive investor documentation, tax forms (K-1s, W-8/W-9), subscription agreements, and catalog valuation files are encrypted at rest using AES-256 encryption.
- Access Controls & MFA: Access to internal systems and the LP Portal enforces strict Role-Based Access Control (RBAC) and mandatory Multi-Factor Authentication (MFA).
- Network & Endpoint Defense: Continuous vulnerability scanning, Web Application Firewalls (WAF), DDoS mitigation, and regular third-party penetration testing are conducted across our infrastructure.
Multi-Jurisdictional Data Protection Compliance
We process personal data in strict compliance with applicable global privacy frameworks, including:
- European Union / Luxembourg: The General Data Protection Regulation (EU GDPR);
- British Virgin Islands: The BVI Data Protection Act, 2021 (DPA);
- United States: The Gramm-Leach-Bliley Act (GLBA) and applicable state privacy laws;
- Republic of Korea: The Personal Information Protection Act (PIPA).
Responsible Vulnerability Disclosure
If you are a security researcher or partner and believe you have identified a security vulnerability or suspicious activity affecting OTR Partners' digital assets, please report it immediately via contact form.