Security at every stage of your journey

From first sign-up to everyday use, security is layered, proactive, and user-focused. You control your data; we keep it safe with best-in-class tools.

Contact security team

Secure your new account

Getting started means locking down your account from day one. Set a strong password, turn on multi-factor sign-in, and review your security settings regularly.

Your data is protected—here’s how

Security means making sure no one else gets a peek at your data—not hackers, not nosy neighbours, not even us without reason. We use layered security measures: data encryption in transit and at rest, multi-factor sign-in, fraud monitoring, and read-only account connections. Each piece is like a different lock on the same door. Your records stay your own, and only you control when or how they’re shared.
It’s not just about technology. We train our team in security best practices, and always update systems to meet new Australian standards. When in doubt, we help users secure their accounts and provide tips for recognising phishing attempts.
Team discussing data security protections

Security features that protect every user

Your privacy and security are our foundation. Data protection is built into every tool and process on this platform.

Data encrypted in transit and at rest

Data is encrypted during transfer between your device and our servers and remains encrypted while stored. This approach protects information from unauthorised access at all stages.

Read-only account connections for safety

All account connections are strictly read-only, meaning our platform cannot move funds or modify your records—only view them for reconciliation purposes. This minimises the risk of unintended actions.

User data never sold and always deletable

Personal data is never sold, leased, or used for marketing. Users can request complete data deletion, and all requests are processed in line with Australian privacy laws and security best practices.

How to keep your account secure

You can protect your account with strong passwords, multi-factor sign-in, alert monitoring, and by staying aware of phishing attempts. Combined, these steps create robust security for every user.
  • Encryption for all data transfers All data transferred between your device and our servers is encrypted using protocols that comply with Australian security standards. This prevents unauthorised access while information moves through the system.
  • Multi-factor authentication Multi-factor sign-in adds an extra barrier to unauthorised access. You’ll enter a code from your phone or app, so even if a password is compromised, your account stays protected.
  • Continuous fraud monitoring Automated systems monitor accounts for signs of unusual activity or potential fraud. Alerts are sent if anything suspicious is detected, so you can act quickly and keep your records safe.
  • Strict privacy and data rights We never sell your data and only use it to provide services. You can request data deletion at any time, and we ensure compliance with Australian privacy laws.

Security questions answered

Find answers to common questions about data privacy, encryption, and account security.

Security FAQ

Have a security question or unsure about a feature? Browse these answers or reach out for more detail.

Ask our team

Data is encrypted both in transit and at rest. Only authorised users and support staff can access your information, and all access is logged for audit and compliance purposes. Encryption protocols follow Australian privacy standards.

Multi-factor sign-in requires both your password and a unique code from your phone or an authenticator app. This prevents unauthorised access, even if your password is compromised. The extra step is quick and significantly increases your account’s safety.

No, your data is never sold. It is only used to provide the services you request. You may also request permanent deletion of your data at any time for further privacy.

Continuous monitoring looks for signs of unusual account activity, such as logins from new locations or repeated failed access attempts. Alerts are sent to help you respond quickly to potential threats.

You can delete your account or request all your data to be removed from our platform. Just contact our team and we’ll guide you through the process, ensuring it’s secure and complete.

Australian privacy and security standards require us to train staff, regularly test systems, and keep all user data within strict compliance. We meet or exceed all current legal requirements.

We recommend strong, unique passwords, enabling multi-factor sign-in, staying alert for suspicious emails, and reviewing account alerts regularly. Simple steps add up to strong protection.

Yes, we provide alerts if a security-related event occurs, such as a login from a new device or attempted access from an unusual location. These alerts help you act quickly to keep your account safe.

We use cookies to support essential site features, improve performance, and enhance your experience. By continuing to browse or clicking 'Accept', you consent to our use of cookies in line with our Cookie Policy.