Security
Money apps live or die on trust. Here's how we earn ours.
Encryption everywhere
All traffic uses TLS 1.3. Stored data is encrypted with AES-256. Banking and brokerage credentials never touch our servers — they're tokenised by our aggregation partners.
Defense in depth
Multi-factor authentication is required by default. Sensitive actions (payments, transfers, large trades) gate behind step-up auth. Privileged production access is short-lived and audited.
Custody, not control
Your money is held with regulated partners — FDIC-insured banks for cash, SIPC-insured brokers for investments. Grounded routes instructions; we never warehouse your funds.
Independent assurance
We're working toward SOC 2 Type II. Subprocessors and the data they handle are listed in our Privacy Notice; we'll publish a full sub-processor registry as new vendors come online.
Found something concerning? Email security@grounded.money. We respond to every report.