Security
Read-only by design, encrypted twice, and yours to delete.
Connecting a bank is a real decision. This is exactly what Contha can and cannot do with that access, how it is held, and what we do not have yet.
Reads
- Balances
- Transactions
- Holdings
Cannot
- Move money
- Freeze an account
- Close an account
If a feed stops, the account is untouched and the page says so.
How it is held
Six things that are true today
- Read-only, and it cannot move money
- Banks connect through Plaid with read access only. Contha sees balances and transactions; it cannot move, hold or freeze anything, and it is not a bank. Cards are charged by Stripe; card numbers never reach us.
- Bank tokens, encrypted twice
- The database and its backups are encrypted by the provider. The token that reads your bank is encrypted again, AES-256-GCM, under a key that lives only in the hosting environment, so a copy of the database alone opens nothing.
- Two-step sign-in
- An authenticator app can be required at every sign-in and again before a bank is connected. Sign-in links and password resets go only to the confirmed address.
- Only the people you choose
- A partner sees the books at the role you give them, edit or look. An accountant gets a read-only link that expires. There is no staff login into your books: support asks you for a link.
- Yours to take, yours to delete
- Export every row, any time, as CSV or JSON. Deleting the account deletes everything at once; the encrypted backups roll off within seven days, and in no case later than thirty. If Contha ever closes, you get sixty days’ notice and the export keeps working.
- No tracking in the app
- The app carries no analytics tag of any kind, and error reports have personal details scrubbed before they leave our servers. The marketing site counts page views without cookies.
Every company that touches your data, and what each one sees, is listed on the privacy page. Traffic is TLS everywhere, with HSTS preloaded and a strict content security policy.
Not yet
What we do not have
- No SOC 2 report and no published third-party penetration test yet.
- No list of active sessions or sign-out-everywhere yet.
- No passkeys yet; two-step sign-in is by authenticator app.
Report a problem
Found something?
Email support@contha.com with “Security” in the subject. A person reads it and replies. Please do not test against other people’s accounts or data. The same address is in security.txt.