Compliance disclosure

Business Continuity Plan

How Vega keeps serving clients if our primary office or systems are unavailable.

Placeholder. Final BCP signed by senior management during RIA registration; tested annually.

1. Scope

This BCP applies to Vega Wealth's investment advisory operations and Vega Tax's CPA practice. It covers natural disasters, cyber incidents, key-person unavailability, and vendor failures.

2. Recovery objectives

Client access to assets: Custodian (Altruist) operates independently. Even if Vega is offline, clients can contact Altruist directly to access their accounts.
Communication: Restored within 24 hours via secondary channels (status page, email, phone).
Data: Supabase region replication + nightly off-region backups. Recovery Point Objective: under 1 hour. Recovery Time Objective: under 24 hours.
Trade execution: If our system is down, IARs can submit orders directly through Altruist's portal.

3. Key-person backup

Critical roles (CCO, IAR, CPA) have a designated backup with cross-training. Single-person dependencies are tracked and resolved within 60 days.

4. Vendor failure

Critical vendors (Supabase, Altruist, Vercel, Anthropic) are monitored. Tier-1 vendors have a documented fallback or migration plan; recovery target under 7 days.

5. Testing

Tabletop exercise annually. Full DR drill (region failover + backup restore) at least once per year. Findings are remediated within 90 days.