Skip to main content

Security

Steady can read your money.It can never move it.

The connection is read-only, your bank password never reaches us, and you can cut it off from either end at any time. The six facts below are the whole arrangement, not a summary of one.

What we hold

01

Read-only access

Steady can only view your transactions and balances. We can never move money, make payments, or modify your accounts in any way.

02

256-bit encryption

All data is encrypted in transit (TLS 1.3) and at rest. Your financial information is protected with the same standard used by banks.

03

An accredited requestor, not a middleman

Bank connections are handled by Akahu, an accredited requestor and a direct participant in New Zealand's regulated open banking system.

04

Revoke any time

You can disconnect your bank accounts instantly from within Steady or directly through Akahu. Your access, your control.

05

NZ Privacy Act compliant

We comply with the Privacy Act 2020. You have the right to access, correct, or delete your personal data at any time.

06

No credential storage

We never see or store your bank login credentials. Authentication happens directly between you and Akahu using OAuth.

Questions about security?

If you have any concerns about how we handle your data, reach out to [email protected]. The full inventory of what Steady stores, where it lives and how long it is kept is on the data handling page.