Trust & Transparency
How we source our data, protect your information, and stay on the right side of the line — in one place.
Information only. Altstock is an information and data-aggregation platform. We do not facilitate, broker, match, execute or settle any securities transaction, and we are not registered with SEBI, RBI or IRDAI. Nothing here is investment advice, a recommendation or a research report.
Security
The controls below are currently in place. We describe only what is actually implemented — we do not list aspirational or uncertified controls.
✓
Encryption in transit
All traffic is served over HTTPS/TLS, with HSTS (includeSubDomains, preload) forcing secure connections.
✓
Hardened browser policy
A strict Content-Security-Policy, Permissions-Policy, nosniff and clickjacking (frame) protection on every response.
✓
Role-based access
Separate admin, partner and client roles. Roles are re-derived from the live account on every request, so access is revoked immediately.
✓
Protected write actions
All content and market-data writes require a server-side admin token, compared in constant time and never shipped to the browser.
✓
Scoped data access
Partner and admin APIs are scoped so one account cannot read or change another's records; the public feed is anonymized.
✓
Input sanitization
All stored input is sanitized against injection / stored-XSS, and controlled vocabularies are enforced server-side.
✓
Rate limiting
Per-IP rate limits on authentication and API endpoints, with a login throttle, to blunt brute-force and scraping.
✓
Private document handling
Sensitive partner documents are stored outside the public web root and served only to admins as downloads, never inline.
Found a security issue? Please report it to security@altstock.in and we will respond promptly.
Compliance
Altstock is an information platform. We aggregate and present data about India's private, pre-IPO and unlisted-securities ecosystem. We are not a SEBI-registered research analyst, investment adviser or broker-dealer, and we are not registered with RBI or IRDAI.
We do not facilitate, broker, match, execute or settle transactions; we do not hold client funds or securities; and we do not provide investment advice or recommendations. Any indicative interest shown is a non-binding expression of interest — not an offer, quote or executable order — and any dealing is arranged directly between the parties through their own advisers and intermediaries.
For how we classify and source data, see our Methodology. For the full terms governing use of the platform, see our Terms of Use.
Risk Disclosure
Unlisted and pre-IPO securities are high-risk. They are illiquid and may be impossible to sell when you wish; they are subject to transfer restrictions and lock-ins; valuations are indicative and can change sharply or prove inaccurate; disclosures are limited and infrequent compared to listed companies; an expected IPO may be delayed, repriced or may never happen; and you can lose your entire investment. Past performance is not indicative of future results. Decide only with independent advice from a SEBI-registered adviser and your own due diligence. All investment decisions rest solely with you.
