Security

The database enforces isolation between households

Every table holding customer data has row-level security enabled and forced, and the policies are evaluated against the identity of whoever is asking. The application does not filter by tenant in its own code: that would not be security, it would be a convention.

Documents are private

A statement is stored in private object storage and read only through a signed link that expires in five minutes. There is no public URL for your documents.

A session cannot leak between requests

The caller's credentials are set inside the transaction and discarded when it ends, so a reused connection cannot carry one person's identity into another person's request.

What we do not have yet

There is no two-step verification, no sign-in with external providers, and no external security audit. When those exist this page will say so, with the date. A financial product that lists measures it does not have has already told you what it is.