Is Envestnet safe?
Review Envestnet security risks.

The following security profile for Envestnet includes the basics youā€™ll need for a vendor risk assessment: security certifications, supply chain details, privacy policy, terms of service, GDPR compliance, and more.
All Security Profiles
FinanceEnvestnet
Envestnet Organization Details

Category

Finance

Organization Details

What is Envestnet?

Explore our connected ecosystem of solutions, intelligence, and technologies that connect peopleā€™s daily lives with their long-term goals. See how weā€™re equipping advisors with the tools and resources needed to deliver the most impactful financial advice to their clients.

Headquarters

Hosting

Hosting locations

Security Program

Security Certifications

SOC2 Compliance
PCI Compliant
HIPAA Compliant
SOC2 Compliance
SOC 2 Compliant
GDPR Compliant
ISO 27001 Compliant
FedRamp Compliant
CSA Star Level 1
Compliant

Security Page

https://envestnet.com/security

Security Portal

Bug Bounty

Vulnerability Disclosure

Terms of Service

https://envestnet.com/legal

Privacy Policy

https://envestnet.com/privacy

Status Page

Authentication

AuthenticationĀ / SSO

Supported Okta Features
Login with Google support
Login with Microsoft support
Supports SSO
Two-factor authentication via SMS
Two-factor authentication via E-mail
Two-factor authentication via Hardware
Two-factor authentication via Software
Two-factor authentication via TOTP
Two-factor authentication via U2F

OAuth Details

Envestnet Supply Chain
  • Imperva
  • Amazon Web Services (AWS)
  • Marketo
  • Equisolve
  • Okta
  • PR Newswire
  • Pardot
  • Notified
  • Vercel
  • Refined
  • Seismic
  • Skilljar
  • Mimecast
  • Zendesk
  • Apple Business Manager
  • DocuSign
  • TeamViewer
  • OneTrust
  • Atlassian
  • Google Analytics
  • GlobalSign
  • Google Tag Manager
  • New Relic
Envestnet Subdomains
  • winthorpe-uat.envestnet.com
  • admin.envestnet.com
  • symmetrypartners.envestnet.com
  • maintenance.envestnet.com
  • test.envestnet.com
  • access.envestnet.com
  • epm-qa.envestnet.com
  • autodiscover.envestnet.com
  • ops.envestnet.com
  • proposal-dev.envestnet.com
  • ngt-dev.envestnet.com
  • api.envestnet.com
  • portal.envestnet.com
  • envcloud-uat.envestnet.com
  • tamu.envestnet.com
  • ciam-dev.envestnet.com
  • mds-uat.envestnet.com
  • university.envestnet.com
  • content.businesscenter-s.envestnet.com
  • livesend.envestnet.com
  • mds.envestnet.com
  • smb-qa.envestnet.com
  • helpdesk.envestnet.com
  • winthorpe.envestnet.com
  • advisor-scorecard.envestnet.com
  • scotia.envestnet.com
  • docs.businesscenter-s.envestnet.com
  • go.envestnet.com
  • smb-q.envestnet.com
  • ciam-qa.envestnet.com
  • demo.envestnet.com
  • ci.envestnet.com
  • envcloud.envestnet.com
  • ir.envestnet.com
  • smb.envestnet.com
  • www2.envestnet.com
  • newsroom.envestnet.com
  • reporting.envestnet.com
  • cr-qa.envestnet.com
  • epm-dev.envestnet.com
  • auth.envestnet.com
  • svb.envestnet.com
  • billfin-dev.envestnet.com
  • billfin-qa.envestnet.com
  • ql.envestnet.com
  • upa-test1.envestnet.com
  • advisor.envestnet.com
  • ei-qa.envestnet.com
  • proposal-qa.envestnet.com
  • client.envestnet.com
  • ccm-dev.envestnet.com
  • tdpcw.envestnet.com
  • epm-uat.envestnet.com
  • investor.envestnet.com
  • ifs.envestnet.com
  • client-test1.envestnet.com
  • api.businesscenter-s.envestnet.com
  • prod.envestnet.com
  • cr-dev.envestnet.com
  • upa-dev.envestnet.com
  • businesscenter-s.envestnet.com
  • mf.envestnet.com
  • www.envestnet.com
  • info.envestnet.com
  • ubs.envestnet.com
  • ngt-test1.envestnet.com
  • ngt-uat.envestnet.com
  • ngt-nrqa.envestnet.com
  • upa-qa.envestnet.com
  • proposal.envestnet.com
  • mf-qa.envestnet.com
  • ccm-qa.envestnet.com
  • kestrafinancial.envestnet.com
  • ei-dev.envestnet.com
  • mf-uat.envestnet.com
  • winthorpe-integration.envestnet.com
  • streetscape.envestnet.com
  • ngt-patchqa.envestnet.com
  • connect.envestnet.com
  • ei-uat.envestnet.com
  • upa-uat.envestnet.com
  • ameriprise.envestnet.com

Regain control of SaaS security.

Nudge Security discovers all SaaS accounts ever created by anyone in your org within minutes of starting a free trial. Get a full SaaS inventory today, along with insights and automation to improve your SaaS security posture.

Try it free
Explore demos
Try it free
Explore demos
was able to find all this and much more.
Nudge was able to find all this and much more.
Nudge Security provides detailed security profiles for thousands of SaaS apps. Sail through security assessments with our proprietary intelligence on vendorsā€™ security, risk, and compliance programs.
Stop chasing down answers. Start a free 14-day trial of Nudge Security to learn:
Stop chasing down answers.ā€ØStart a free 14-day trial of Nudge Security today.
Whoā€™s using Envestnet in your org?
What data does Envestnet have access to?
What is Envestnetā€™s breach history?
What apps are in Envestnetā€™s supply chain?
See what you can discover
Product
OverviewChangelogPricingStatus
Resources
FAQSecurity ProfilesSaaS Security GlossaryKnowledge BaseAPI Documentation
Company
Our ApproachOur TeamPress
Assurance
Trust &Ā SecurityTerms &Ā ConditionsPrivacy PolicySitemap

Use Cases

SaaS Security
SaaS Security Posture Management (SSPM)Audit & ComplianceSaaS Attack SurfaceAccount Takeover Detection
SaaS Management
Shadow ITSaaS SpendCloud GovernanceAI Security
Third-Party Risk Management
Supply Chain SecurityOAuth Risk Management
Identity Governance
User Access ReviewsEmployee OffboardingSSO Onboarding
Ā© {year}, Nudge Security
1401 Lavaca St, Suite 40219
Austin, TX Ā 78701