Skip to content

Security and privacy

Your bank data, protected.

Finantr reads your bank transactions and talks to HMRC for you. This is how your data is kept safe, and what you stay in control of.

  • Read-only bank access

    • Bank connections run through Open Banking by TrueLayer, which is authorised by the FCA (FRN 901096).
    • Finantr can read your transactions. It cannot move money and never sees your bank login: you sign in on your own bank's app or website.
    • Disconnect a bank in one tap in the app.
  • Encrypted at rest

    • Bank and HMRC access tokens and your National Insurance number are encrypted with AES-256 before they are stored.
    • Passwords are hashed, never stored. Multi-factor secrets are encrypted too.
    • Data travels over HTTPS between the app, our servers, your bank and HMRC.
  • Multi-factor sign in

    • Protect your account with an authenticator app, an email code or a passkey.
    • Sensitive actions, such as deleting your account, need a completed multi-factor sign in.
    • Our admin panel needs a password and a second factor, with rate limits on every attempt.
  • Following HMRC's rules

    • Finantr is HMRC recognised software for Making Tax Digital for Income Tax.
    • Every call to HMRC carries the fraud prevention data HMRC requires.
    • Every submission is logged with HMRC's receipt, so you can see exactly what was sent and when.
  • You decide who sees your records

    • Accountant access is read-only. Your accountant cannot change anything.
    • Every time your accountant looks, it is logged for you to see. Remove access at any time.
    • Changes to sensitive records are kept in an audit log.
  • How we use AI

    • A model suggests a category for each transaction. You decide what counts as an expense.
    • Only expenses you confirm go into your updates to HMRC.
    • Our privacy policy explains what is sent to the model and where.

Your data, your rights

Privacy

Registered with the ICO
Finantr Ltd is registered with the Information Commissioner's Office, registration number ZC124758.
UK GDPR
We process your data under UK GDPR and the Data Protection Act 2018. You can ask for a copy of your data, correct it or ask us to delete it.
Deleting your account
Delete your account in the app. Your financial data is erased within 30 days, keeping only the records the law requires.
No advertising
We do not use advertising or third-party tracking cookies, and we do not sell your data.

Read the full privacy policy and terms of service. Questions about your data: privacy@finantr.com.

Found a security issue?

Email help@finantr.com with the details. A person will reply, and we will keep you updated while we fix it.

Start free today.

Free plan for as long as you like. Paid plans from £4.99 a month.