Your security is our foundation
At Investminder, data security is not an option. It's a fundamental pillar of our mission. Connect your accounts with complete peace of mind.
DSP2 / PSD2
SOC 2 Type II
Google Cloud ISO 27001
AES-256 + TLS 1.2
Read-Only Aggregation: the absolute guarantee
Investminder can never make a transfer, direct debit, or any action on your financial accounts. This is a technical impossibility, not just a policy.
No action possible on your funds
Access is strictly and exclusively read-only. We can see your data, but we cannot move, modify, or delete anything.
DSP2-Regulated Partners
We work exclusively with financial aggregators compliant with the European PSD2 directive: Powens (approved by ACPR - Banque de France) and Snaptrade (SOC 2 Type II certified - registered with U.S. and Canadian authorities).
Your credentials never reach us
Your banking credentials are transmitted in encrypted form directly to our partners, who handle authentication via a secure interface. Investminder never sees them.
Institutional-grade data protection & encryption
We apply financial institution standards to protect every piece of data that flows through our platform.
Encrypted communications (TLS 1.2+)
All communications between your browser and our servers are encrypted via HTTPS with a minimum of TLS 1.2.
Data stored with AES-256
Data at rest is protected with the AES-256 algorithm, a standard used by governments and global banking institutions.
Sensitive data delegation
Investminder does not directly store your personal data. Authentication is handled by Auth0, and payments are secured by Stripe. We only retain the technical identifiers strictly necessary for operation.
Solid infrastructure
Our services run on Google Cloud Platform (GCP), globally recognized for its security and reliability.
Google Cloud Platform
Infrastructure certified ISO 27001, SOC 1/2/3, PCI DSS and GDPR compliant. The same infrastructure that powers Gmail and YouTube.
Security by Design (OWASP)
Every software release undergoes automated testing, vulnerability analysis, and manual code reviews, following OWASP Top 10 recommendations.
Delegated Security
We make no compromises on your access and transactions. By entrusting authentication to Auth0 and payments to Stripe, we offer you the protection of the two most secure infrastructures on the modern web.
Your data belongs only to you.
We do not sell any of your information. Investminder strictly complies with the most demanding privacy standards in the world: GDPR (Europe), CCPA (California), and PIPEDA (Canada). At any time, you retain the right to access, export, or permanently delete your data with a single click.
Start your free trial
Join thousands of investors who manage their wealth with complete confidence.
Sign in now