Security
Bank-grade encryption, read-only open banking and a full audit trail. Kassa never moves money without your say-so.
00 / Trust
We look after your money data like it’s our own. Our business depends on it.
01 / Encryption
256-bit
At rest, with TLS 1.3 in transit.
02 / Access
0 writes
Read-only open banking through FCA-regulated providers.
03 / Hosting
In-region
Data stored in London and Frankfurt.
04 / Testing
2×/yr
Independent penetration tests.
01 / Access
Only the right people see the right numbers.
Invite your team and accountant with roles that match how you work. Approvals stop payments and changes going out without a second pair of eyes.
Two-factor sign-in for everyone
Roles for owners, staff and accountants
Approvals on payments and payroll
Team · 5 people
Access · Roles
5 people
2FA on
Owner
Full access · 2FA
Admin
%
Accountant
Read and export
Viewer
Office manager
Invoices and bills
Editor
Audit log · Today
Changes · Today
14
All verified
Rule updated
Card fees → Bank charges
Logged
⇄
Supplier bank details
Approved by owner
Approved
New device
iPhone · Cardiff
Verified
02 / Audit
Every change, written down.
Kassa logs who changed what and when, from a reconciliation rule to a supplier’s bank details. Export the log for your accountant or auditor in one click.
Tamper-proof audit log
Alerts on new devices and bank detail changes
Export to CSV or PDF
03 / Standards
Built to the standards banks expect.
Open banking
Connections through FCA-regulated providers.
GDPR
Clear data rights, a named DPO and a data processing agreement.
Cyber Essentials Plus
Certified every year by an independent assessor.
SOC 2 Type II
Audit in progress, report available on request.
Hourly backups
Encrypted backups every hour, kept for 35 days.
Responsible disclosure
Found something? Email security@kassa.finance.
Security
Security questions.
Can Kassa move money from my account?
No. Connections are read-only unless you approve a payment yourself, and payments always need your bank’s confirmation.
Where is my data stored?
In UK and EU data centres in London and Frankfurt. It never leaves the UK and EU.
Who at Kassa can see my numbers?
Only a small support team, and only when you grant temporary access from settings. Every view is logged.
What if I lose a device?
Sign out every session from settings and reset two-factor. Your financial data is never stored on the device.
Can I get your security report?
Yes. Email security@kassa.finance for our latest penetration test summary and policies.
