Security

Your data is safe with us

We handle financial data. That means security isn't an afterthought — it's foundational to everything we build. Here's exactly how we protect you.

🔒 TLS 1.3 encryption

🇬🇧 UK GDPR compliant

☁️ ISO 27001 infrastructure

Our approach

Security by design, not as an afterthought

🔐

Encryption everywhere

All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Your financial data is never stored unencrypted — not even temporarily.

👁️

Minimal data collection

We only collect the data we need to generate your score and improve the product. We don't store more than necessary and we never sell your data to third parties.

🎛️

You stay in control

You decide what to share, who sees it, and for how long. You can delete all your data at any time — no questions asked.

The details

How we protect your information

🏦

FCA-regulated Open Banking (coming soon)

We're building Open Banking support now. Once live, our provider will be authorised and regulated by the FCA, and all connections will use read-only access — we'll never be able to initiate payments or modify your accounts.

☁️

ISO 27001 cloud infrastructure

Our servers run on cloud infrastructure that holds ISO 27001 certification. Data is hosted in UK/EU data centres in compliance with UK GDPR data residency requirements.

🔑

You'll never share your bank login

Once Open Banking is live, connecting your bank will mean authenticating directly with your bank in their secure environment. Kivo will never receive, store, or process your banking username or password.

🛡️

Access controls & audit logs

Internal access to customer data is role-restricted, logged, and regularly audited. Only authorised engineers can access production data, and only when operationally necessary.

🐛

Responsible disclosure

We operate a responsible disclosure programme for security researchers. If you've found a vulnerability, please report it to security@getkivo.co.uk.

📋

UK GDPR compliance

Kivo is fully compliant with UK GDPR. You have the right to access, rectify, and erase your personal data. Full details are in our Privacy Policy.