[vladko]

you have some good points, that are definitely important.

as far as technology we do not offer any investment advice .. we offer a platform for wealth management. RIA's a primary target audience, but the core logic can be used in other implementations.

you are right that before going to production the system needs to be verified by a 3rd party in order to ensure that it measures up security-wise.. but this is no different than having a similar audit done for any ERP, (PCI compliance for ACH/ shopping carts, or any other software you can think that deals with financial data...)