Security
Nimbus Portfolio - Trust & SafetyOur Security Commitment
Nimbus Portfolio is a real estate intelligence platform for homeowners, rental owners and investors. You trust us with information about your homes, loans and money, and we take that seriously.
Nimbus is run by a small team (today, its founder). This page lists, in plain terms, what we do today to protect your information.
Bank Connections, Payments and Storage
Bank connections
Through PlaidNimbus never sees your bank sign-in details. The credentials that link your bank are stored encrypted.
Payments
Through StripeStripe is PCI DSS Level 1 certified. Nimbus never stores card numbers.
Your stored data
With our providersOur hosting and document storage providers encrypt your data at rest.
Data Protection & Encryption
Encryption at Rest
- Our hosting and document storage providers encrypt your data at rest.
- The credentials that link your bank are stored encrypted.
Encryption in Transit
- Every connection to Nimbus uses HTTPS, so what you send and receive is encrypted on the way.
- When you link a bank, you sign in through Plaid. Nimbus never sees your bank sign-in details.
Access Controls & Authentication
- Passwords are stored hashed with bcrypt, never in plain text.
- After 5 failed sign-in attempts, an account is locked for 15 minutes.
- Multi-factor sign-in protects the administrative accounts that run Nimbus: hosting, code, payments and bank connections.
- Access to production data is limited to the people who run Nimbus.
Connected Apps
You can connect an AI assistant or another app to your Nimbus account. You stay in control of what it can do.
Your permissions
- • It gets only the permissions you choose.
- • Its activity is listed in Settings, Connected apps.
Short-lived access
- • Its access is short-lived.
- • You can revoke it at any time.
Your yes first
- • A change it makes needs your yes.
- • You can undo a change for 30 days.
Security Monitoring
- Error monitoring and rate limits help us spot and stop misuse.
We plan to commission independent security testing as Nimbus grows.
Deleting Your Data
Deleting your account deletes your data, except records the law requires, such as billing records held by our payment processor.
Security Best Practices for Users
How You Can Help Keep Your Account Secure
- • Use a strong password that you do not use anywhere else
- • Keep your contact information up to date
- • Log out of shared or public computers
- • Be cautious of phishing emails and suspicious links
- • Check Settings, Connected apps and disconnect any app you no longer use
- • Report anything suspicious to steven@nimbusportfolio.com
- • Keep your devices and browsers updated
Security Contact Information
To report a security issue or ask a security question:
Email: steven@nimbusportfolio.com
This page describes our security practices as of October 4, 2026.
Last Updated: October 4, 2026 | Version: 2.0
Last Updated: October 4, 2026 | Version: 2.0