> ## Documentation Index > Fetch the complete documentation index at: https://docs.fellow.money/llms.txt > Use this file to discover all available pages before exploring further. # Security & Risk > Comprehensive overview of Fellow's security infrastructure, risk management systems, and protective measures for users and liquidity providers Fellow combines bank-grade security protocols with cryptocurrency best practices, built on enterprise-grade infrastructure from Cred.ai and Privy to provide comprehensive asset protection across traditional and digital finance. **Multi-Layer Security**: Fellow operates with defense-in-depth security, combining traditional banking compliance, advanced crypto security, and real-time AI risk management. ## Banking Infrastructure Security Fellow's traditional banking services are powered by Cred.ai's proprietary banking technology, built with full compliance management and licensed through WSFS Bank. Deposits insured up to \$250,000 through WSFS Bank, Member FDIC Full regulatory compliance and consumer protection PCI DSS and EI3PA certified infrastructure Industry-standard security compliance for payment processing Our banking partner Cred.ai never shares user data Strict privacy controls and data protection policies *** ## Infrastructure Security Fellow operates on enterprise-grade security infrastructure that provides comprehensive protection across all financial operations. **Advanced Detection Systems** AI-powered fraud detection monitors all transactions in real-time, automatically flagging and preventing suspicious activity **Multi-Layer Validation** Every transfer goes through multiple security checks including identity verification, risk scoring, and automated approval workflows **End-to-End Protection** All sensitive data is encrypted in transit and at rest using industry-standard encryption protocols **Identity Management** Multi-factor authentication, secure session management, and granular permission controls protect account access *** ## Cryptocurrency Wallet Security Fellow's crypto capabilities are powered by Privy's enterprise-grade wallet infrastructure, featuring hardware-secured, SOC 2-compliant wallets built on Trusted Execution Environments (TEEs) and distributed key sharding. **True User Ownership** Users have full custody of their wallets without needing to manage secret keys. Neither Privy nor Fellow ever see user keys **TEE Protection** Keys are only reconstructed in secure hardware environments, ensuring only owners can access their assets **Shamir's Secret Sharing** Cryptographic keys are split using Shamir's secret sharing and distributed across isolated services with no single point of failure **Universal Compatibility** Support for EVM chains (Ethereum, Base, Arbitrum), Solana, Bitcoin, and more ### Advanced Wallet Protections **Defense-in-Depth Architecture** Privy's security combines key sharding, end-to-end encryption, secure enclaves, and RBAC with micro-segmentation to enforce least privilege. **Security Layers:** * **Hardware Isolation**: Keys stored in secure enclaves (TEEs) * **Encrypted Networks**: All data transmission is encrypted * **Distributed Storage**: Key shards stored across isolated services * **Role-Based Access**: Least privilege access controls **No Single Points of Failure:** * Multiple independent security layers * Redundant key storage across geographic regions * Automated failover and recovery systems **Self-Custody with Convenience** Users can export keys for their embedded wallet, providing an escape hatch to leave Privy at any time. **User Sovereignty:** * Full ownership of private keys * Ability to export and migrate wallets * No vendor lock-in or dependency risks * Direct blockchain interaction capabilities **Seamless Management:** * No seed phrase management required * Automatic wallet generation and backup * Simple recovery through authenticated login *** ## Credit Risk Management Fellow's instant transfer system includes comprehensive risk assessment and default handling processes to protect both users and liquidity providers. Real-time tracking of ACH transfers already in progress, providing confidence that funds will settle within 1-3 business days Connected bank accounts and wallets serve as proof of identity and fund ownership, reducing fraud risk All credit activities can impact credit scores through standard reporting, maintaining user payment responsibility Complete identity verification data enables professional collections processes when needed Individual defaults are socialized across the entire liquidity pool rather than affecting specific providers ### Infrastructure Monitoring Fellow provides real-time monitoring and transparency across all platform integrations to set proper user expectations. Continuous monitoring of response times across all connected banks, exchanges, and financial platforms Public reporting on ACH settlement times and success rates to maintain transparency Real-time monitoring of pool utilization, performance metrics, and system stability Live status updates for all integrated platforms and services to inform users of any issues ### Transfer Validation Process User initiates instant transfer between connected accounts through Fellow's interface System validates that both source and destination accounts are properly connected and verified Traditional ACH transfer begins immediately, providing confidence in upcoming settlement Pool provides immediate funds to destination while ACH processes in background System tracks ACH completion over 1-3 business days and handles any exceptions *** ## Liquidity Provider Protection Fellow's single-pool architecture includes sophisticated risk management to protect liquidity provider capital while maximizing returns. **Diversified Risk Model** Instead of individual LPs bearing specific risks, Fellow's pool model socializes both gains and losses across all participants. **Risk Distribution:** * **No Concentrated Exposure**: No single LP exposed to individual user defaults * **Short Duration**: 2-4 day exposure periods limit risk timeframes * **Small Positions**: Many small credit instruments vs. few large exposures * **Dynamic Limits**: Credit limits adjust based on user behavior and pool capacity **Protective Mechanisms:** * **Reserve Fund**: 10-20% of fees held for default protection * **Utilization Caps**: Maximum pool usage limits to maintain liquidity * **Automated Rebalancing**: Dynamic capital allocation based on risk metrics **User Liability and Collections Process** Users remain fully liable for payments even if ACH settlement extends beyond the typical 1-3 day window. **Recovery Process:** 1. **User Responsibility**: Failed or delayed ACH creates credit obligation that users must fulfill 2. **Credit Impact**: Payment issues can negatively affect credit scores through standard reporting 3. **Collections Capability**: Complete KYC data from signup enables professional collections when necessary 4. **Socialized Losses**: Any unrecovered amounts are distributed proportionally across LPs **Identity Verification:** * Full KYC data collected during account setup * Connected bank accounts and wallets verify user identity * Professional collections agencies can be engaged using verified identity data * Standard credit reporting maintains payment accountability **Real-Time Risk Analytics** Continuous monitoring and adjustment of pool performance and risk metrics. **Key Metrics:** * **Default Rates**: Historical and trending default statistics * **Recovery Rates**: Success of collections processes * **Pool Utilization**: Active vs. available liquidity ratios * **Yield Performance**: Returns vs. risk-adjusted benchmarks **Automated Adjustments:** * Dynamic interest rates based on risk and utilization * Credit limit adjustments for individual users * Pool rebalancing based on performance metrics *** ## Regulatory Compliance Fellow operates under comprehensive regulatory oversight through its banking and technology partners. **Traditional Finance Compliance** * FDIC insurance through WSFS Bank * Federal banking regulations * Consumer protection laws * Anti-money laundering (AML) compliance **Industry Standards** * PCI DSS certification * Visa network compliance * Payment card industry standards * Data security requirements **Digital Asset Compliance** * FinCEN MSB registration where required * State-level money transmission licenses * Crypto custody regulations * Cross-border transfer compliance *** ## Security Incident Response Fellow maintains comprehensive incident response procedures to address any security concerns quickly and effectively. **24/7 Monitoring:** * Continuous system monitoring and alerting * Real-time fraud detection and prevention * Automated threat response systems * Human security team oversight **Incident Response Process:** 1. **Detection**: Automated systems and human monitoring 2. **Assessment**: Rapid evaluation of threat severity 3. **Containment**: Immediate measures to limit impact 4. **Recovery**: Restore normal operations safely 5. **Communication**: Transparent updates to affected users **User Protection:** * Immediate account freezing for suspected compromise * Proactive user notifications for security issues * Full investigation and remediation of incidents * Insurance coverage for eligible losses *** ## Best Practices for Users **Protect Your Access** * Use strong, unique passwords * Enable multi-factor authentication * Keep app updated to latest version * Don't share login credentials **Safe Transfer Practices** * Verify recipient addresses carefully * Use High Security Mode for large transfers * Monitor account activity regularly * Report suspicious activity immediately *** ## Security Resources Contact our security team immediately for any concerns or suspected vulnerabilities Stay informed about security enhancements and important updates to Fellow's platform **Questions about security?** Our security team and customer support are available 24/7 to address any concerns about account safety, transaction security, or privacy protection.