How Rare Index protects the platform, its data, and its users.
Rare Index handles market-sensitive pricing data that institutional investors rely on for decision-making. We take that responsibility seriously.
Our security posture is built on three principles:
We do not believe security through obscurity is security at all. This page describes our approach transparently — because trust is built through visibility, not vagueness.
Our application services are deployed on Railway, a managed cloud platform that provides containerized environments with automated scaling, isolated build pipelines, and zero-downtime deployments. Infrastructure configuration is managed through code — no manual server provisioning.
Market data is stored in Snowflake, an enterprise-grade cloud data platform used by Fortune 500 companies for analytics and data warehousing. Snowflake provides:
All data in transit between users, our application servers, our data sources, and our database is encrypted via TLS. API integrations with external data sources use authenticated, encrypted connections exclusively.
User accounts are secured through Auth0, an enterprise identity platform trusted by thousands of organizations worldwide. Auth0 provides:
Access to production systems, databases, and deployment pipelines follows the principle of least privilege. Administrative access requires authenticated credentials with role-based permissions. Database access for development and analytics is restricted to read-only service accounts with dedicated credentials.
Every price record in our system carries full source provenance — traceable to its originating platform, timestamp, and ingestion batch. This chain of custody is maintained from ingestion through index calculation to user-facing display. Raw source records are preserved untouched after ingestion, and published datasets are immutable — once published, they are never modified.
Our data pipeline processes run in isolated environments with no public network exposure. Source API credentials are stored as encrypted environment variables — never hardcoded in application code or version control.
Snowflake's architecture provides continuous data protection with Time Travel (access to historical data states) and Fail-safe (disaster recovery beyond the Time Travel retention period). This ensures data can be recovered even in the event of accidental modification or deletion.
All connections to the Rare Index platform are served over HTTPS with TLS encryption. HTTP requests are automatically redirected to HTTPS.
Application dependencies are monitored for known vulnerabilities. Critical security patches are prioritized and deployed promptly. Our frontend and backend codebases use current, actively maintained frameworks.
All user inputs and API parameters are validated and sanitized to prevent injection attacks, cross-site scripting (XSS), and other common web vulnerabilities.
Platform health, API responses, and data pipeline status are tracked through structured run logs and validation on every governed job.
Every data pipeline job runs under full validation — record counts, source distribution, null rates, and cross-source consistency checks. A job publishes only when its validation passes; failures are recorded with full diagnostics.
In the event of a security incident, our response prioritizes containment, assessment of impact, remediation, and transparent communication with affected users. We are committed to disclosing security incidents that materially affect user data or platform integrity.
