Your financial life deserves the quiet kind of security.
We only publish security claims we can prove today. This page describes exactly what VAULT does, what it never does, and where each control sits in the product.
The things VAULT never asks for.
VAULT organises your financial information. It is not a payment system, it is not a bank client, and it does not attempt to move money on your behalf. That means we never need — and we never store:
- CVV or card security code
- PIN for any card, account or app
- OTP from your bank, wallet or card issuer
- Internet-banking passwords or app credentials
- Full card numbers — VAULT only stores the last 4 digits for identification
How you sign in — and stay signed in safely.
Sign in with Face ID, Touch ID, Windows Hello or a hardware key. Passkeys are the WebAuthn / FIDO2 standard — there is no shared secret to steal or phish.
Passwords are salted and hashed with bcrypt (cost 12) before they ever hit the database. We can never read your password, only verify it.
Removing a passkey, exporting data or changing security controls requires a fresh authentication — even if you're already signed in.
Access tokens live 30 minutes; refresh tokens rotate every 7 days. Sign out of one browser and every session on that device ends.
Mine. Partner. Joint. Together — with real boundaries.
VAULT Together is built around four privacy zones. What lives in one zone is not visible to another unless you explicitly move it.
Family plans extend the same model — every family member has their own private zone, and the shared household zone shows only what everyone has opted to share.
What actually protects your data today.
Every request between your browser, our API and our database is encrypted in transit. HTTPS is enforced; plain-HTTP traffic is rejected at the edge.
Every record is scoped to a tenant_id filter server-side. A finance user in one household cannot query another household's data, even by ID.
Every create / edit / delete / login / export event is written to an immutable audit log we can replay if you ever need to know what happened.
Admin, Finance, Expense-user and Viewer each see only what their role allows. Cross-role privilege escalation is enforced at the endpoint, not in the UI.
You can see everything, and you can leave with everything.
Download every record in your workspace as JSON, any time, from Settings → Data Export. Nothing is held hostage.
Delete your workspace and every associated record from Settings → Account. Deletions are queued for 24 hours in case you change your mind, then purged.
Hide balances and card numbers with a single tap — useful when you're screen-sharing or on a train. Nothing about you appears in browser history.
If you find a security issue, we want to hear from you.
Email security@vaultbypd.com with steps to reproduce, expected impact and any supporting artefacts. We acknowledge every report within 3 business days. Please do not test on live customer workspaces or run destructive scans — the demo at /demo is a safe target.
What happens when you leave.
- Live records: deleted immediately from primary storage.
- Backups: encrypted rolling backups are overwritten within 35 days.
- Audit log: retained for one year for security-forensics purposes, then purged.
- Billing records: retained for the period local law requires (typically 7 years in India).
Try the demo with synthetic data — no account, no card, no session. Or start the free trial when you're ready. Cancel any time.