How ASA Vault Protects Your Data

Your security is our priority

ASA Vault is built with multiple layers of security to protect your financial data.

Encrypted connections

All communication between ASA Vault and our servers uses HTTPS encryption, ensuring your data is protected in transit.

Secure bank connections

Bank account linking is handled through MX, a SOC 2 compliant financial data platform. Your bank login credentials are never stored by ASA Vault — they are securely processed by MX and your financial institution.

Token-based authentication

ASA Vault uses JWT (JSON Web Token) authentication. Your session is secured with a unique token that expires automatically, preventing unauthorized access.

Biometric security

When you enable biometric login, a cryptographic key pair is generated. The private key is stored securely in your device’s keychain (iOS) or keystore (Android) and never leaves your device.

Password protection

Passwords must meet complexity requirements (uppercase, lowercase, numbers, special characters, 8+ characters). Password history is enforced so you cannot reuse your last 5 passwords.

Privacy controls

When connecting to financial apps through the Explore marketplace, you have full control over:

• Which accounts to share
• What personal information to hide (name, email, account numbers)
• The ability to revoke access at any time

Security alerts

You can enable alerts for security events including password changes and new device logins through Settings > Notifications and Alert Preferences.