Security

Your sensitive financial data — merchant names, account identifiers, institution details — is encrypted in your browser before it ever reaches our servers. We use AES-256-GCM, the same encryption standard trusted by financial institutions and government agencies worldwide.

Each member has a unique encryption key derived from their authentication credentials. This key exists only in your browser session and is never transmitted, stored, or accessible to anyone — including us. When you close your browser, the key is gone.

What this means: Even with full access to our database, no one — not our team, not a potential attacker — can read your personal financial information. They would see only encrypted data with no means to decrypt it.

This isn't a policy decision — it's an architectural one. We deliberately designed our systems so that we do not have the ability to view your personal financial data. No employee, no system, no process within Uprealm can access the content of your encrypted information.

Your financial data is stored in a dedicated, isolated environment that is physically separated from our internal operations. Administrative credentials for this environment exist only in the production runtime — they are not stored in our development systems, internal tools, or anywhere accessible to our team.

Every member's data exists in complete isolation, enforced at the database level. Row-level security policies ensure that your authenticated session can only access your own data. This is not application logic that could be bypassed — it is a database-level architectural constraint that applies to every query, every time.

No other member can see your data. No internal process can cross member boundaries. Each member's encrypted data is accessible only through their own authenticated, encrypted session.

Access to Uprealm requires two independent verification factors. First, a magic link sent to your verified email — no passwords to steal, phish, or guess. Second, a time-based one-time password from your authenticator app, verified on every login.

Access is invitation-only. Only pre-approved email addresses can authenticate. There is no public registration, no self-signup, and no way to request access through the platform itself.

Bank connections are facilitated through Plaid, used by thousands of financial institutions worldwide. We never see, handle, or store your banking credentials. Plaid connects directly to your bank through their secure infrastructure.

Connection tokens are encrypted with a separate server-side encryption layer before storage. You can disconnect any financial account instantly through your dashboard, which immediately revokes access — we lose the ability to reach your financial institution the moment you disconnect.

We build on infrastructure and partners that meet the highest compliance standards in the industry. Here is what underpins our security posture:

Our infrastructure runs on enterprise-grade platforms with SOC 2 Type II compliance, automatic failover, and continuous monitoring. All data in transit is protected by TLS 1.3 encryption. All data at rest is encrypted at the infrastructure level — in addition to our application-level encryption.

We operate on a zero-trust model — no entity, internal or external, is trusted by default. Every request is authenticated, every connection is verified, and every action is logged. Our systems are designed to fail safely: if any component is compromised, the blast radius is contained.

Every member relationship begins with a mutual NDA — legally binding protection for both parties before any information is exchanged. Your ideas, your business details, and your personal information are protected by law from the moment you join.

This is mutual by design. We hold ourselves to the same standard we ask of you.

You can disconnect financial accounts, export your data, or request complete deletion at any time. When you disconnect an account, access is revoked immediately. When you request deletion, all data is permanently removed within 30 days — encrypted data, metadata, everything.

We don't hold your data hostage. We don't make it difficult to leave. Your data is yours — always.