Trust
Every claim, and what stands behind it.
We don’t list certifications we don’t hold. Each line below says where it actually stands; the detail page behind it says how we know.
- OWASP Top-10 hardenedBackend hardened per internal review pre-launch
- Field-level encryptionFernet on Plaid tokens + payout routing; TLS 1.2+ in transit
- TOTP two-factor authAvailable to every user, required for advisors
- 2,300+ engine testsForecast engine + tax + auth + estate + Monte Carlo coverage
- No ad trackers, no data salePostHog + Sentry only; both contractually prohibited from reselling
- SOC 2 readinessIn progressType I readiness underway; observation window to follow
The full posture, in plain terms — and the diligence pack behind it:
Security overview