. . "The sensitive information may also be stored on the server of a company that hosts the information, for example a company which distributes compliance information (e.g., mutual fund prospectuses) for financial institutions." . .