You are handing a platform your invoices, your payroll records and your cash position. You deserve specifics, not a badge wall. This page lists exactly what protects your data, how you verify it and how you leave with everything if you choose to.

Why it matters

Financial data is the last thing you can afford to place on trust alone. Vague security pages that say ‘bank-grade’ and stop there are asking you to take the most sensitive part of your business on faith.

What you get

• Row-level security enforced on every table

• OAuth tokens encrypted with AES-256-GCM

• MFA with TOTP and active session management

• GDPR export and hard delete, with a 30-day retention purge

• Public subprocessor list and a downloadable DPA

• Weekly automated security gates and an immutable, DB-enforced audit trail on Teams

How it works

1. Connect every source through OAuth in about 2 minutes — CashFish never asks for your other tools’ passwords, and tokens are encrypted with AES-256-GCM at rest.

2. AI extracts and recommends inside an environment isolated by row-level security, and nothing touches your numbers until you approve it.

3. You stay in control: MFA and session management on your account, an immutable audit trail on Teams, and GDPR export or hard delete whenever you decide to leave.

Verify everything on this page yourself during the 4-day free trial — cancel anytime, full refund guarantee.