Security at fynease
At fynease, we understand that you are entrusting us with one of your most valuable assets - the financial data of your company or client. We take this responsibility very seriously and strive to provide a secure environment for your data.
Data Ownership and Deletion
You own your data, and we are the caretakers. We ensure that we have the necessary controls to manage access to your data. When you delete a company from fynease, we delete any associated access tokens to ensure we can no longer access your data. The data will exist in our offsite backup for a period of time and then be removed, ensuring no data remains with fynease.
Hosting and Physical Security
fynease is hosted on Microsoft Azure, a highly scalable cloud computing platform with end-to-end security and privacy features built-in. We take additional measures to maintain a secure infrastructure and application environment. For more specific details regarding Azure security, please refer to Azure Trust Center.
User Access and Identity Management
We use Auth0 for identity and user access management. No usernames or passwords are stored on fynease servers. To access fynease, all users securely identify themselves through their login credentials on Auth0, or using social logins via Google or Microsoft accounts. For more specific details regarding Auth0 security, please refer to Auth0 Security.
Within each account, fynease provides multiple levels of access to confidential customer data. You can invite or remove individual users from your account whenever you want.
Payment Security
We partner with Stripe to manage payments on fynease. Stripe is certified as a PCI Level 1 Service Provider. fynease does not have access to customer credit card data at all. For more information on Stripe security, please refer to Stripe Security.
Data Protection and Backup
The availability of your data is crucial to your use of fynease. We backup and encrypt your data (256-bit AES encryption) before moving it to a secure offsite location in a secondary data center. This means that in the event of a disaster or an outage at our primary datacenter, we can recover quickly and continue to provide fynease from a geographically redundant secondary facility.
Company-specific data is kept separate through logical separation at the data tier, based on application-level access permissions and roles. fynease contains redundancy in as many areas as possible to avoid and recover from failure. This includes a load-balanced and clustered environment with automatic recovery on physical hardware failures.
Employee Policies
Only a select few fynease staff have access to the servers where data is stored. We go to great lengths to ensure the right balance between support and a secure infrastructure. Select fynease staff can access your data for support purposes only when you provide explicit permission, or if the account is in review for compliance with fynease Terms of Service.
Privacy
For more information on how fynease treats your personal information, please see our Privacy Policy.
We hope this overview of our security measures provides you with peace of mind while using fynease. We are committed to ensuring the confidentiality, integrity, and availability of your data. If you have any questions or concerns, please contact us at support@fynease.com.
