At Allvue Systems ("Allvue"), trust is at the heart of what we do and we're dedicated to building trust through innovation, accountability, and excellence. Our Trust Center is your go-to resource for accessing key information about our security practices, compliance frameworks, and data protection standards. Here, you’ll find insights into how we prioritize safeguarding your data through robust security measures and industry best practices.
We maintain a comprehensive Information Security and Data Privacy Program to ensure the confidentiality, integrity, and availability of our systems. By providing this information up front, we aim to help you streamline due diligence, accelerate security reviews, and reduce friction in your review process.
Allvue (www.allvuesystems.com) is a premier provider of AI-powered investment management solutions for the alternative investment industry, supporting private equity firms, venture capital funds, credit asset managers, and fund administrators. Our platform supports the full fund lifecycle from portfolio and fund management to investor relations, back-office accounting, risk analytics, and centralized data management — empowering you to streamline operations, maintain compliance, and make superior investment decisions with confidence.
Lionpoint Group
IQ-EQ
KPMG
AlbaCore Capital Group
Standish Management
Trident Trust
Trust Center Updates
Critical PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Summary
On October 21, 2026, the PHP project released security updates addressing two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which could allow unauthenticated remote code execution.
These vulnerabilities affect PHP installations used to serve web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP, and LiteSpeed, and may affect PHP versions dating back to PHP 5. Details are in the PHP release announcement https://www.php.net/index.php#2026-10-21-5
Affected Products
None. Allvue Systems has completed an internal security assessment and confirmed that PHP is not used in any Allvue applications. As a result, Allvue's production applications are not affected by these vulnerabilities.
Impact
No impact. No customer action is required.
Allvue Successfully Completes 2025 SOC 1 Type II and SOC 2 Type II Audits
We are pleased to announce that Allvue has successfully completed its 2025 SOC 1 Type II and SOC 2 Type II examinations. Both audits resulted in clean (unqualified) audit opinions, reinforcing our commitment to maintaining a strong security posture, operational excellence, and robust compliance practices.
Our SOC 2 Type 2 report is available for download through the Allvue Trust Center.
To request a copy of our SOC 1 Type 2 report, please contact us at infosec@allvuesystems.com or reach out to your Allvue Customer Representative
Allvue Announces Updated Subprocessor List
UPDATE TO THE SUBPROCESSOR LIST
We are providing this announcement to inform you that we've updated our subprocessors list, which can be accessed here:
https://www.allvuesystems.com/legal-terms/data-privacy/subprocessor-list.pdf. Subject to the terms of any relevant agreement signed between customer and Allvue, the Subprocessor List forms part of and is incorporated into the DPA between you and Allvue.
If you have any questions about this update, please don't hesitate to reach out to your Customer Success Team, or email us directly at privacy@allvuesystems.com.
Thank you for your understanding and continued partnership with Allvue.
Allvue Announces Updated Subprocessor List
UPDATE TO THE SUBPROCESSOR LIST
We are providing this announcement to inform you that we've updated our subprocessors list, which can be accessed here:
https://www.allvuesystems.com/legal-terms/data-privacy/subprocessor-list.pdf. Subject to the terms of any relevant agreement signed between customer and Allvue, the Subprocessor List forms part of and is incorporated into the DPA between you and Allvue.
If you have any questions about this update, please don't hesitate to reach out to your Customer Success Team, or email us directly at privacy@allvuesystems.com.
Thank you for your understanding and continued partnership with Allvue.
Allvue Announces Updated Subprocessor List
UPDATE TO THE SUBPROCESSOR LIST
We are providing this announcement to inform you that we've updated our subprocessors list, which can be accessed here:
https://www.allvuesystems.com/legal-terms/data-privacy/subprocessor-list.pdf. Subject to the terms of any relevant agreement signed between customer and Allvue, the Subprocessor List forms part of and is incorporated into the DPA between you and Allvue.
If you have any questions about this update, please don't hesitate to reach out to your Customer Success Team, or email us directly at privacy@allvuesystems.com.
Thank you for your understanding and continued partnership with Allvue.