Information, not money. See how every disclosure is reviewed.Read about security
ProductBanks and fintechsInsurersRegistrars and pensionsDevelopersSecurityPricingBook a conversation

Security

Built so that no single party can open a vault.

What we do, what is in place today, and what is still on the way. Nothing here is marked live until it is.

Principles

Partner data is isolated.

Encryption keys are held per partner.

Disclosure needs a split key and a person's review.

Every action is in a tamper-evident log.

Webhooks are signed and replayable.

Where each control stands

Security controls and their status
ControlStatus
Partner data isolationPlanned
Signed, replayable webhooksPlanned
Tamper-evident audit logPlanned
Split-key disclosurePlanned
Two reviewers and an owner veto windowPlanned
Independent penetration testPlanned
SOC 2 Type IIPlanned
Sub-processors

Who handles data for us, and where.

Responsible disclosure

How to report a problem to us.

Data processing agreement

The terms we sign with partners.

Need our security pack?

We ask you to accept an NDA first, then we send it.

Request our security pack