About this article
Why we wrote it

Some principals tell us they keep sensitive records on paper or in email because digital platforms feel riskier. The Panama Papers and similar leaks show that the larger threat is often an insider with access, not only an outside hacker. We wrote this piece to explain how a digital platform with the right controls can reduce both risks, so your office can review who can see its data today and how that access is governed.

How we made it

We used AI tools to help gather research and speed up the first draft. That left more of our time for checking each figure against its original report and adding what we see in client conversations. A Masttro editor reviewed every claim, and members of our team read the article before it was published.

Written by
Ricardo Wiesner
Edited by
Dan Williams
Published
June 3, 2024

Key Takeaways

In April 2016, 11.5 million documents were leaked from the database of the Panamanian law firm Mossack Fonseca. The Panama Papers, as the ignominious leak came to be known, was not the only such incident. The Paradise Papers offered more information, including details of Queen Elizabeth’s private estate, as did the Pandora Papers.

Each of these highlights the power of individuals to divulge confidential information. In the case of the Panama Papers, one source, styling themselves as “John Doe,” contacted a German newspaper, offered to hand over the data, and the deed was done.

The takeaway: Even if an organization rigorously protects against hackers, a data leak from the inside remains possible.

Family offices of all types and sizes and institutions that serve them are particularly vulnerable to inside jobs. Their clients are often high-profile and there may be media appetite for their data. So when partnering with technology providers, it’s natural for family offices and institutions that serve them to think: Our vendor might protect client data from external parties, but what about the vendor itself?

‍

At Masttro, we think that’s a valid—and smart—worry. The solution is to select a WealthTech platform that takes the most stringent precautions, including controls like these:

  • Automated data transfer. With some WealthTech solutions, data is automatically transmitted from the financial institution to the secure platform without intervention or interference from the vendor. This means the data visibility, quality, and control are not compromised by vendor screen scraping or manipulation.
  • Audited data management where necessary. In cases where automated data transfer is impossible, the best WealthTech platforms provide users with an alternative data management and workflow functionality that has audit controls, thereby obviating the need for the technology vendor to see names, locations, figures, and documents.
  • Double encryption. To store and transmit information securely, some WealthTech vendors encrypt the data at transit, at rest, and in use. A second layer of protection for each individual client is added through multi-factor authentication (MFA) and private encryption keys that prevent others, including the vendor, from seeing their clients’ data.
  • Centralized storage. When documents are encrypted and stored in a centralized location like a digital vault, there are no hard copies and email attachments floating about at risk of being leaked.
Four controls that keep your data from the vendorAutomated data transfer: Data moves from the bank straight to the platform, with no vendor screen scraping.; Audited data management: Where feeds are impossible, audited workflows keep names and figures hidden from the vendor.; Double encryption: Encrypted in transit, at rest and in use, plus MFA and private keys for each client.; Centralized storage: Documents sit encrypted in a digital vault, not in hard copies or email attachments.CHECKLISTFour controls that keep your data from the vendorAsk a WealthTech vendor about each one before you signAutomated data transferData moves from the bank straight to theplatform, with no vendor screenscraping.Audited data managementWhere feeds are impossible, auditedworkflows keep names and figures hiddenfrom the vendor.Double encryptionEncrypted in transit, at rest and inuse, plus MFA and private keys for eachclient.Centralized storageDocuments sit encrypted in a digitalvault, not in hard copies or emailattachments.Source: Masttro
Four controls that keep your data from the vendorAutomated data transfer: Data moves from the bank straight to the platform, with no vendor screen scraping.; Audited data management: Where feeds are impossible, audited workflows keep names and figures hidden from the vendor.; Double encryption: Encrypted in transit, at rest and in use, plus MFA and private keys for each client.; Centralized storage: Documents sit encrypted in a digital vault, not in hard copies or email attachments.CHECKLISTFour controls that keepyour data from thevendorAsk a WealthTech vendor about each one beforeyou signAutomated data transferData moves from the bank straight tothe platform, with no vendor screenscraping.Audited data managementWhere feeds are impossible, auditedworkflows keep names and figureshidden from the vendor.Double encryptionEncrypted in transit, at rest and inuse, plus MFA and private keys foreach client.Centralized storageDocuments sit encrypted in a digitalvault, not in hard copies or emailattachments.Source: Masttro
Ebook

Five Dashboards Every Wealth Owner Needs

The ownership, cash flow, performance and geographic views principals expect to see on demand.
Masttro ring decoration

Many family offices have already embraced technology solutions. Others are more hesitant, held back by gnawing security concerns. At Masttro, we believe that aside from the improvements in efficiency that WealthTech brings—and those are many—digital processes also afford a level of security that manual processes could never provide. That’s especially the case with WealthTech platforms that protect client data not only from malevolent actors—but from themselves.

‍

Want to learn how Masttro can provide you the best tech setup for managing your wealth? Schedule time with one of our wealth tech experts.

In their words
What clients say about Masttro
“The Secure Communication Portal is very useful. It helps me during our monthly client meetings by providing a comprehensive view of each client’s consolidated portfolio. What used to take me days of work can now be done simply by verifying that the information matches the bank statements.”
Verified G2 User
Verified G2 User
Financial Services, Small Business
Verified G2 review
“Masttro allows us to consolidate all custodians and set up the entire legal structure to offer our clients a true holistic vision of their assets.”
Patricia Correa
Patricia Correa
Digital Strategy Director, Santander
"I really appreciate their amazing customer support. The team is attentive and dedicated, and they don't just stop at software implementation. They've been really helpful with different scenarios."
Sabrina B.
Sabrina B.
Family Office Accounting Manager, Austin, TX