Security
How we protect your financial data.
1. Data Encryption
- Data is encrypted in transit using HTTPS/TLS.
- Sensitive information is stored securely using AES-256 encryption at rest.
2. Authentication
- Secure user authentication with rate-limited login attempts.
- Passwords are securely hashed using bcrypt.
- Session management with automatic expiry to help protect accounts.
3. Access Control
- Role-based permissions (Owner, Admin, Viewer).
- Users can only access data within workspaces they are authorized to view.
- Complete data isolation between workspaces.
4. Payment Security
- CASSAFLOW does not store credit card information.
- All payments are securely processed by Paddle, our Merchant of Record.
5. AI & Data Processing
- Financial data is processed only to provide AI-powered insights and platform features.
- AI providers are used solely to deliver requested functionality, in accordance with our Privacy Policy.
- Your data is not used to train AI models.
6. Infrastructure
- Cloud-hosted infrastructure with regular backups.
- Security monitoring and regular software updates.
- Audit logging for all significant actions.
7. User Responsibilities
- Use strong, unique passwords for your account.
- Protect your account credentials and do not share them.
- Report suspected unauthorized access promptly.
8. Incident Response
If a security incident affecting customer data is identified, affected customers will be notified as required by applicable law. We maintain incident response procedures to ensure timely detection, containment, and resolution.
9. Contact
To report a security concern or vulnerability, contact us: