How we protect your data
Every layer of the stack is hardened against unauthorised access.
AES-256 encryption
All data is encrypted at rest using AES-256-GCM and in transit using TLS 1.3. Your financial records are unreadable without authorised credentials.
NZ data residency
Your data is stored in the ap-southeast-2 (Sydney) AWS region — the closest zone to NZ with the strongest data sovereignty protections.
Row-level security
Every database query is scoped to your workspace. No query can ever return data from another organisation.
Tamper-proof audit trail
Every action in the system — every edit, approval, and deletion — is logged with a timestamp and user identity. Entries cannot be modified after the fact.
Open banking
Bank access that
you control.
Bank connections are managed through Akahu, New Zealand's official open banking platform. ty.money receives read-only transaction data — we can never move money or modify your account.
- Read-only access — we never touch your funds
- Revoke access at any time from Akahu
- Your bank credentials never pass through our servers
- Akahu-regulated data handling
Compliance snapshot
- Encryption at rest
- AES-256-GCM
- Encryption in transit
- TLS 1.3
- Data region
- ap-southeast-2 (NZ)
- Record retention
- 7 years (IRD)
- Uptime SLA
- 99.99%
- Bank access
- Read-only via Akahu