How we protect your data

You are trusting us with financial records, so these are the things we do and the things we never do.

Sign-in

Passwords are checked against known breaches and stored with a modern hash. Two-factor authentication is available, and you can see and end your own sessions.

Encryption

Traffic is encrypted. Sensitive fields such as account numbers and private notes are encrypted in the database, and uploaded statements are kept private and removed on a schedule.

Separation

Every workspace is separated from every other. Staff access is limited, protected by two-factor authentication and logged.

Payments

Card payments are handled by our payment provider. Your card details never reach iHisab.

Your control

Export all your data whenever you want. Delete your account and it is removed after a short grace period.

Found a security problem? Please tell us through the contact page and mark it as security.