Security
Steady can read your money.It can never move it.
The connection is read-only, your bank password never reaches us, and you can cut it off from either end at any time. The six facts below are the whole arrangement, not a summary of one.
01
Read-only access
Steady can only view your transactions and balances. We can never move money, make payments, or modify your accounts in any way.
02
256-bit encryption
All data is encrypted in transit (TLS 1.3) and at rest. Your financial information is protected with the same standard used by banks.
03
An accredited requestor, not a middleman
Bank connections are handled by Akahu, an accredited requestor and a direct participant in New Zealand's regulated open banking system.
04
Revoke any time
You can disconnect your bank accounts instantly from within Steady or directly through Akahu. Your access, your control.
05
NZ Privacy Act compliant
We comply with the Privacy Act 2020. You have the right to access, correct, or delete your personal data at any time.
06
No credential storage
We never see or store your bank login credentials. Authentication happens directly between you and Akahu using OAuth.
Questions about security?
If you have any concerns about how we handle your data, reach out to [email protected]. The full inventory of what Steady stores, where it lives and how long it is kept is on the data handling page.

