Skip to main content

Trust Center

Your financial data security is our top priority. Learn how we protect your information with bank-level encryption, industry certifications, and continuous monitoring.

Security at a Glance

Bank-Level Encryption

AES-256 encryption at rest, TLS 1.3 in transit. Same standard used by major banks.

SOC 2 Type II In Progress

SOC 2 Type II certification in progress. Expected completion Q2 2025. Using enterprise-grade infrastructure.

99.99% Uptime SLA

Enterprise-grade reliability on Google Cloud Platform infrastructure.

Certifications & Compliance

SOC 2 Type II

In Progress

GDPR

Compliant

CCPA

Compliant

PCI DSS Level 1

Compliant

All certifications are maintained through continuous monitoring and annual audits by independent third parties.

Infrastructure & Technology

Clario is built on world-class infrastructure from trusted providers:

Google Cloud Platform

Primary hosting and database infrastructure

Certifications: SOC 2, ISO 27001, PCI DSS

Firebase (Google)

Authentication, database, and file storage

Certifications: SOC 2, ISO 27001, GDPR

Vercel

Edge hosting and CDN

Certifications: SOC 2, ISO 27001

Stripe

Payment processing

Certifications: PCI DSS Level 1, SOC 2

Additional Security Measures:

  • 99.99% uptime guarantee
  • Daily automated backups
  • Point-in-time recovery
  • Multi-region redundancy
  • DDoS protection
  • 24/7 infrastructure monitoring

Data Protection

Encryption

  • AES-256 encryption for data at rest
  • TLS 1.3 for data in transit
  • End-to-end encryption for sensitive fields
  • Secure key management (Google KMS)

Access Control

  • Row-level security in database
  • User data isolation by default
  • Role-based access control (RBAC)
  • Two-factor authentication available

Privacy

  • Zero data sharing with third parties
  • No data selling or advertising
  • AI processing temporary (not retained)
  • User-controlled data deletion

Monitoring

  • Real-time security monitoring
  • Automated threat detection
  • Security audit logging
  • Incident response procedures

Security Testing & Audits

Third-Party Penetration Testing

Annually

Independent security experts test our systems for vulnerabilities

Continuous Vulnerability Scanning

24/7

Automated scanning for security vulnerabilities and misconfigurations

Bug Bounty Program

Ongoing

Community-driven security testing with responsible disclosure

Code Security Audits

Quarterly

Manual code reviews and security assessments

Compliance Documentation

Download our compliance documents and security policies:

Security Whitepaper

Not yet published — contact us if you need it for a vendor review

Restricted

Privacy Policy

How we handle and protect your data

Download

Data Processing Agreement (DPA)

GDPR-compliant data processing terms

Download

SOC 2 Type II Report

Independent security audit report

Available to Enterprise customers under NDA

Restricted

Penetration Test Results

Latest security assessment summary

Available to Enterprise customers under NDA

Restricted

Incident Response

In the unlikely event of a security incident, we follow a strict protocol:

1

Detection & Containment

Immediate action within 1 hour to isolate and contain the issue

2

Investigation

Forensic analysis to determine scope and impact

3

User Notification

Affected users notified within 72 hours as required by GDPR

4

Remediation

Fix vulnerabilities and implement additional safeguards

5

Post-Mortem

Public disclosure of incident details and prevention measures

Security Team & Contact

Our security team is available 24/7 to address your concerns and respond to vulnerabilities.

Security Issues

security@clario.finance

Report vulnerabilities or security concerns

Privacy Questions

privacy@clario.finance

Data privacy and GDPR requests

Compliance

compliance@clario.finance

Compliance documentation and audits

For urgent security matters, please use our security.txt file for PGP-encrypted communications.

System Status & Monitoring

All Systems Operational

Check our real-time status page for system uptime, incidents, and maintenance schedules:

View Status Page

Questions About Our Security?

Our security team is here to help. Contact us for detailed security documentation, audit reports, or to discuss your specific requirements.

Contact Security Team