- Security
Bank-gradeby default.
Your books are the most sensitive data you own. We treat them that way, and we show our working.
- Controls
Locked down,and logged.
Encrypted everywhere
AES-256 at rest and TLS 1.3 in transit, with keys rotated automatically.
Read-only connections
Bank feeds can read balances and transactions. They can never move money.
SOC 2 Type II
Audited every year by an independent firm. The report is available on request.
UK data residency
Data and backups stay in UK data centres. EU hosting is available on Scale.
SSO and SCIM
Access follows your identity provider. Leavers lose access straight away.
Full audit trail
Every change, approval and login is recorded and exportable.
- Support access
You holdthekeys.
Nobody at the company can see your books unless you say so. When support needs access, you get a request, a time limit and a log.
- Access only by your approval
- Time-limited, never permanent
- Every view logged and visible to you
- Revoke in one tap
AI agent • Live
"Support asked for read access to fix your import. Allow for 24 hours?"
- FAQ
Securityquestions.
Is my financial data safe?
Bank-grade encryption, SOC 2 Type II, and read-only connections by default. Your data lives in your region and never trains our models.
Who at Halvern can see my data?
Nobody, unless you grant temporary support access from your settings. Every access is logged and visible to you.
Where is my data stored?
In UK data centres by default, with EU hosting available on Scale. Backups are encrypted and kept in the same region.
Do you support single sign-on?
Yes. Scale includes SSO and SCIM provisioning, so access follows your identity provider and leavers lose access straight away.
Need theSOC 2 report?
Our team can share the latest audit report and answer your security questionnaire.