Help › Security and privacy

Encryption

Names, emails, phones, memos, payer names, match reasons, notes and uploaded files are encrypted with AES-256-GCM before they are stored. Lookups use keyed hashes, so the same email is found without being stored in clear. All traffic uses HTTPS. Account numbers are stored readable: they are not secret, and payers write them in memos.