Trust & transparency

Your data security,
our absolute priority.

Your financial data deserves the best protection. Here is a fully transparent look at how we secure your account and your information.

End-to-end encryption

All sensitive data is encrypted with AES-256. Communications use TLS 1.3. Your passwords are hashed with bcrypt.

Secure infrastructure

Hosted in ISO 27001-certified datacentres located in the European Union. Encrypted automatic backups every 24 hours.

Minimal data access

Our teams only access your data upon explicit request or to resolve an incident. Every access is logged.

Regular updates

Our team continuously monitors vulnerabilities and applies security patches within 24 hours of their publication.

Strong authentication

Two-factor authentication (2FA) available, biometric login (Face ID / Touch ID) supported. Sessions with automatic expiry.

Incident management

In the event of a data breach, you will be notified within 72 hours in accordance with GDPR. Documented incident response procedure.

Regulatory compliance

GDPR

Compliant with the General Data Protection Regulation (EU 2016/679)

EU hosting

Data stored exclusively in European Union datacentres

HTTPS mandatory

All communications are encrypted via TLS 1.3

🔍 Report a vulnerability

Have you discovered a security flaw? We thank you for reporting it to us responsibly. Please do not publish the vulnerability before we have had the opportunity to fix it.

contact@app-thelma.com