Web security baseline
The production web application is served over HTTPS. HSTS, anti-framing controls, MIME-sniffing protection, a restrictive referrer policy, and a permissions policy are applied across the site.
Security & trust
Built for controlled institutional pilots
Information for universities, firms, security teams, and pilot administrators evaluating WealthSimAI.
Managed infrastructure
WealthSimAI runs on managed cloud infrastructure. The web application is hosted on Vercel and application data is stored and processed through Convex-hosted backend services.
Authenticated access
Application access is authenticated. Student, professor, and administrator capabilities are enforced server-side, with additional protections around privileged role and account changes.
Training data
Student conversations, grades, and simulated portfolio activity are used to provide the training experience. They are not public and are visible only to authorized users described in our Privacy Policy.
Enterprise access and URL filtering
WealthSimAI is a young domain used for an invite-only training application. Some enterprise email and web-security products may temporarily classify young or newly observed domains as unknown or higher risk. WealthSimAI does not require software downloads or browser extensions for normal use.
Domains used for the primary web application
wealthsimai.com
www.wealthsimai.comSecurity teams can contact us for validation or a current architecture summary before making an access decision.
Service providers
The current pilot uses the following providers to deliver core application functionality.
VercelWeb hosting and delivery
ConvexApplication backend and data platform
AnthropicAI client and evaluation workloads
OpenAIRealtime voice workloads
ResendTransactional email
Yahoo FinanceMarket-data retrieval