Security

The short version

Penny Sense handles your books, so we treat your data the way a bank would: encrypted, isolated to your business, logged immutably, and never sold. Your data is yours — you can export it at any time.

We never see your bank credentials

Bank and card accounts connect through Stripe Financial Connections. You authenticate directly with your bank on Stripe's infrastructure; Penny Sense receives read-only transaction data. Your online-banking username and password never touch our systems, and we cannot move your money.

How your data is protected

• Encryption: data is encrypted in transit (TLS) and at rest; sensitive credentials are additionally envelope-encrypted with managed keys.
• Tenant isolation: your business's records are separated with database-level row isolation enforced by the database itself, not just application code, and the application runs under a least-privilege database role.
• Immutable audit trail: security-relevant actions and every change to your books are recorded in tamper-evident, hash-chained audit logs that cannot be edited or deleted.
• Books you can trust: double-entry integrity, separation-of-duties checks, and closed-period locks are enforced at the database layer; financial records are never hard-deleted.
• Operator access: administrative access requires multi-factor authentication and is itself audit-logged.

Our control framework

Penny Sense is built and operated against the SOC 1 and SOC 2 control frameworks — access reviews, vendor management, incident response, disaster recovery, and change management are documented, practiced processes. We're happy to walk qualified customers through the specifics.

Your data stays yours

• You can export your records at any time.
• We don't sell your data or use it to train third-party models.
• AI providers we use are under zero-data-retention agreements.

Questions or reports

Security questions, or something to report? Email support@penny-sense.com — security reports get priority handling.