Encrypted in transit and at rest
Every request runs over HTTPS/TLS, and your data is stored on managed Postgres infrastructure with encryption at rest.
Security & privacy
Your financial data stays yours.
Esgrey Alliance is built around shared money, which means access control is the product — not an afterthought. Here is exactly how your information is protected and what you stay in control of.
Controls in place today
Row-level security
Access rules are enforced in the database itself, not just in the interface — a query can only ever return rows your account is entitled to.
Workspace isolation
Every workspace is a separate tenant. Nothing is shared between workspaces unless you explicitly invite someone into yours.
Role-based permissions
Financial partners get exactly the permissions you toggle on — view, comment, edit, approve — and nothing more. You can change or revoke them at any time.
You control visibility
Your workspace stays completely private until you invite someone. Invitations can be revoked, and access ends immediately when you do.
Activity history
Permission changes, decisions and workspace settings are written to an audit timeline so you can always see who did what, and when.
Secure authentication
Sign-in is handled by a managed auth provider with hashed credentials and Google sign-in. We never see or store your Google password.
What we do not claim
- We hold no SOC 2, ISO 27001 or PCI DSS certification. When that changes, it will be published here with the audit date.
- We do not connect to your bank or mobile money accounts. Transactions are recorded by you or by your recurring rules — no account credentials are ever requested.
- We do not store card details. Subscription payments are processed by Paystack, and card data never touches our servers.
- We do not sell personal data, and we do not run advertising on your data.
Questions about security or privacy?
Write to security@esgreyalliance.com and we will respond. You can also read our Privacy Policy, Terms and Refund Policy.
Start free